sip.ninemsn.com.au

- NINEMSN PTY LIMITED -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 0f:6c:09:71:fb:8f:4b:6d:89:73:04:3a:3d:f5:d5:8b was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 2 DNS name(s) are bare public suffixes: syd-mail01, syd-mail02 The domain SHOULD NOT have a bare public suffix (awslabs certlint)

NINEMSN PTY LIMITED

Organization: NINEMSN PTY LIMITED
Organization unit: I.T
State / Province: NSW
Locality: Sydney
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:6c:09:71:fb:8f:4b:6d:89:73:04:3a:3d:f5:d5:8b
Serial Number (int): 20499379569818266509790451236836070795
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ba:53:36:1f:75:4c:ab:a6:46:40:66:a1:3c:76:94:e4:1d:21:b4:7c
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): eb:ba:09:78:5b:fc:78:65:cc:2e:e4:5a:a7:84:19:60:6c:38:5b:8e
Fingerprint (sha256): 49:82:f5:36:0b:4c:88:3d:ab:05:c9:cd:9a:09:33:33:ca:03:36:3e:75:45:b7:0e:48:87:f5:44:64:1f:90:0c


Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-2009a.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2009a.crl

Check the revocation status for certificate sip.ninemsn.com.au

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.ninemsn.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.ninemsn.com.au
webconf.ninemsn.com.au
webmail.ninemsn.com.au
autodiscover.ninemsn.com.au
mobile.ninemsn.com.au
mail.ninemsn.com.au
syd-mail01
syd-mail02
webmaildr.ninemsn.com.au
av.ninemsn.com.au
rp.ninemsn.com.au

Other certificates including the domain name ninemsn.com.au

(limited to 100 certificates)
networkservices.origin.ninemsn.com.au
showpony.news.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.wideworldofsports.ninemsn.com.au
www.networkservices.ninemsn.com.au
ninemsn.com.au
9now.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
sharepoint.ninemsn.com.au
webmail.ninemsn.com.au
favouritethings.news.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
lyncweb.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
adc.api.ninemsn.com.au
*.ninemsn.com.au
nine.com.au
newsalerts.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.carpoint.ninemsn.com.au
ultimateislandescape.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
godo.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.ninemsn.com.au
*.carpoint.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
miamiswim.ninemsn.com.au
sip.ninemsn.com.au
nowornever.ninemsn.com.au
alerts.news.ninemsn.com.au
godo.ninemsn.com.au
lyncweb.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
*.ninemsn.com.au
9now.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
webmail.ninemsn.com.au
www.networkservices.ninemsn.com.au
entertainmentalerts.news.ninemsn.com.au
nine.com.au
sip.ninemsn.com.au
nine.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
nine.com.au
*.ninemsn.com.au
*.sbkprod.ninemsn.com.au
www.networkservices.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
lsaccess.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
newsalerts.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.carpoint.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
9now.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
motoring.ninemsn.com.au

Certificate

The complete raw certificate details for sip.ninemsn.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ey2u2kVPwVIp7mmOKCj
h3ihHD3UpE6GA079nkBI1YnCT3nhK8mMLHOxKpdu/MAWBK0mNKa1rHraGLr+of4e
q+DQbhQJ99q4Hd2HfpKYj6OcRV9BEw7h42ZhAYJjuv1IFgkMqIcjsEQgt6yiu7yc
m7dFtEjN+sdSBR1mAuPplVGk0+oYD6mHWhDpH3jWnXTB4PUpSEMDylK2HC1sE0bb
ioi6h/1fWfOsvB/ZHiU851WetpOT5MDQHkiWGQUqXG5fiNf/bHDIFgovRHKb1yd9
1TJ6aqVoDrtxCbmahMOVboliRhDqGTgdGWFVANghy6/OOcvIe3s/y7UrYO2B5bEh
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20499379569818266509790451236836070795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NINEMSN PTY LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I.T'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip.ninemsn.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28015393321386368555368630165817598135914276705993028334025491225776311442215006280101801072149355944336044515896058091013293522096622660279400215094199079698419452536160121376833674922322158215477355281383258927831512627170451189120488081831919447950135141031076649283084463711277962940839342595493260875955874475355740424695130587751466484699230639352613543306735031174420167350598350677977620985737363019625403068520066806104747822319355726498093852046460865367930026793217924774134393000899557280662909535067763096172718544131230021142623508446325740952803024779670206455186259137341892337206521681248670845051281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba53361f754caba6464066a13c7694e41d21b47c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syd-mail01'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syd-mail02'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmaildr.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp.ninemsn.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2009a.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2009a.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.3.0.1 (digiCertGlobalCAPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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