mycom.comproof.net

- Commerzbank AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 22:41:e2:2b:08:b3:b6:0d:7a:f8:e8:c0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Commerzbank AG

Organization: Commerzbank AG
State / Province: Hessen
Locality: Frankfurt
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 22:41:e2:2b:08:b3:b6:0d:7a:f8:e8:c0
Serial Number (int): 10602138560862851884476065984
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f4:cf:b1:18:09:ad:f0:d3:96:29:8a:84:0e:b3:f9:60:ae:28:3d:d6
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 41:7d:e3:d2:2d:1c:cc:b7:5b:9f:04:35:c9:21:a7:68:b4:5c:e5:4b
Fingerprint (sha256): 4a:4a:5d:68:cb:9b:0c:d8:9c:af:3b:3f:9e:b6:a1:e7:ef:ad:a6:94:ae:20:51:e8:45:fe:13:56:51:c3:98:b8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate mycom.comproof.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycom.comproof.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycom.comproof.net
partner.comproof.net

Other certificates including the domain name comproof.net

(limited to 100 certificates)
box.comproof.net
access.comproof.net
portal.comproof.net
eu.comproof.net
mycom-uat.comproof.net
mycom.comproof.net
rsasts.comproof.net
b1.comproof.net
lu.comproof.net
mycloud.comproof.net
mycom.comproof.net
rsasts.comproof.net
mycom-sgp.comproof.net
mycom-sgp.comproof.net
portaluat.comproof.net
lu.comproof.net
d1.comproof.net
mycom-nyc.comproof.net
mycom.comproof.net
mycom-nyc.comproof.net
eu.comproof.net
portal.comproof.net
access.comproof.net
portal.comproof.net
eu.comproof.net
access.comproof.net
mycom.comproof.net
mycom-sgp.comproof.net
access.comproof.net
mycom-sgp.comproof.net
eu.comproof.net
d1.comproof.net
capcom.comproof.net
workplace.comproof.net
mycom-nyc.comproof.net
mycloud.comproof.net
mycom-nyc.comproof.net
c2.comproof.net
partner-sgp.comproof.net
access.comproof.net
mycom.comproof.net
b1.comproof.net
box.comproof.net
mycom.comproof.net
eu.comproof.net

Certificate

The complete raw certificate details for mycom.comproof.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG0TCCBbmgAwIBAgIMIkHiKwiztg16+OjAMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTgwMzI2MTA1MTEyWhcNMjAwNTE1MTU0NjAzWjBoMQswCQYDVQQGEwJE
RTEPMA0GA1UECBMGSGVzc2VuMRIwEAYDVQQHEwlGcmFua2Z1cnQxFzAVBgNVBAoT
DkNvbW1lcnpiYW5rIEFHMRswGQYDVQQDExJteWNvbS5jb21wcm9vZi5uZXQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Q6utf770jmwQ4JvFg5s8a+5p
hLcRjseSCpcagiUkbQXdmkzkN6jZQ/dqnNF1QMAjuAiwdCbW+QNoBOFs1e3SIeLn
HktfUTVw47e2N5rnm+wKAeu3bYlG1PP3yrNGPPWzHs2VSJ3RMD1JeJEw7YyVuEyM
P4ZkLzjJA0S67Q04TbhvDpePWjqxAMnDVo7FJI+ceWtIZeabG3uWOs+lssjbYGU+
gCl9CxtH8B2tChNkGyKuaVimbJpOOLxnTKbCeOEQ1RhKixvhoR9zcQlGPokEUUMC
e7EGe5k3aHd2DjUiL3im2eCsyb8Rf8BMqIR6jCeyYp8xsn8DDF9fzhNIVPZfAgMB
AAGjggN7MIIDdzAOBgNVHQ8BAf8EBAMCBaAwgaAGCCsGAQUFBwEBBIGTMIGQME0G
CCsGAQUFBzAChkFodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9n
c29yZ2FuaXphdGlvbnZhbHNoYTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDov
L29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyMFYG
A1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3
Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAA
MEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Mv
Z3Nvcmdhbml6YXRpb252YWxzaGEyZzIuY3JsMDMGA1UdEQQsMCqCEm15Y29tLmNv
bXByb29mLm5ldIIUcGFydG5lci5jb21wcm9vZi5uZXQwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBT0z7EYCa3w05YpioQOs/lgrig91jAf
BgNVHSMEGDAWgBSW3mHxvRwWKVMcwMx9O4MAQOYafDCCAX4GCisGAQQB1nkCBAIE
ggFuBIIBagFoAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFi
Ye75AwAABAMARzBFAiEAjfJRcyv/HI+DU/PODwfivn9ijoUslwNzbreY1jf/3cQC
IC5jcl90HFH1fx7+uEnA4orm8aXOzl88no3qxTxj5wuzAHYAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFiYe75MgAABAMARzBFAiEA1SIP7AfUsDDq
nhfsj9gJpe56TlR3QnGg2pKbbGrBKrECIB7ebnCBbfzMC47QH5SF/sUjzm1DpdIG
0sLmP/EScdl/AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFi
Ye79XAAABAMARzBFAiAozGdzM0EI6JCqUTT8N1Duz2aINsUh6blOjhFNY9N2FQIh
ALVkA7NQl7pp13EwYTNf4XduIWorE9exs6WfCK1q8SOHMA0GCSqGSIb3DQEBCwUA
A4IBAQAX+qXE74OTEGxKIFgpE7D0iGEPD5+z6w7g17Hb0wSBBCjiCcQacXOoER3p
LP5+/bBfUYXHIGw+2fq8YKvcHGUHocwoELbDpKR/AyuKzlMzrfRcVE2q5JHhgq4C
RrbueUkg8VPIuDXrSrgWupBKZkllQ/PSpn57oFaWY09Pn03i1xjp9LoxrMqwdz3+
Um+B28n8S1vW1c3HRt2UqrxdxTfJmj52wEPVwrQ55rZNyon0By6uTi1FP7l4htaC
Acod8kqV7CcxmZwsO6lVSEgnynIoFcL6TIWTczSBnPK+N+vm0enia+ktb2LePI1I
Rm0g2AaZrvnilXpW/jrxI2x9DMcJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUOrrX++9I5sEOCbxYOb
PGvuaYS3EY7HkgqXGoIlJG0F3ZpM5Deo2UP3apzRdUDAI7gIsHQm1vkDaAThbNXt
0iHi5x5LX1E1cOO3tjea55vsCgHrt22JRtTz98qzRjz1sx7NlUid0TA9SXiRMO2M
lbhMjD+GZC84yQNEuu0NOE24bw6Xj1o6sQDJw1aOxSSPnHlrSGXmmxt7ljrPpbLI
22BlPoApfQsbR/AdrQoTZBsirmlYpmyaTji8Z0ymwnjhENUYSosb4aEfc3EJRj6J
BFFDAnuxBnuZN2h3dg41Ii94ptngrMm/EX/ATKiEeownsmKfMbJ/AwxfX84TSFT2
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10602138560862851884476065984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-26 10:51:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 15:46:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commerzbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycom.comproof.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23387456043239832074686063239752164646772741925960744424934208828051240221574530442939881661109906640949907019707482835602972153404481477157403017930416558356455877241398066966896091769330769760745767776930007118857318648186957522043260413686596632655221504379777032078905959972607528544588748082680046406169351949403586474209408848965147905648098825053958842255502132319185897320742782224492601240452609132438990207349550394640881443681638021093513554660560508148236199932011486585716600945824622147539239507126669007615390900962004768201478950247322006571155084388959274476643344585393045080750325586512351065339487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycom.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.comproof.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4cfb11809adf0d396298a840eb3f960ae283dd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016261eef90300000403004730450221008df251732bff1c8f8353f3ce0f07e2be7f628e852c9703736eb798d637ffddc402202e63725f741c51f57f1efeb849c0e28ae6f1a5cece5f3c9e8deac53c63e70bb30076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016261eef9320000040300473045022100d5220fec07d4b030ea9e17ec8fd809a5ee7a4e54774271a0da929b6c6ac12ab102201ede6e70816dfccc0b8ed01f9485fec523ce6d43a5d206d2c2e63ff11271d97f007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016261eefd5c0000040300473045022028cc6773334108e890aa5134fc3750eecf668836c521e9b94e8e114d63d37615022100b56403b35097ba69d7713061335fe1776e216a2b13d7b1b3a59f08ad6af12387
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0017faa5c4ef8393106c4a20582913b0f488610f0f9fb3eb0ee0d7b1dbd304810428e209c41a7173a8111de92cfe7efdb05f5185c7206c3ed9fabc60abdc1c6507a1cc2810b6c3a4a47f032b8ace5333adf45c544daae491e182ae0246b6ee794920f153c8b835eb4ab816ba904a66496543f3d2a67e7ba05696634f4f9f4de2d718e9f4ba31accab0773dfe526f81dbc9fc4b5bd6d5cdc746dd94aabc5dc537c99a3e76c043d5c2b439e6b64dca89f4072eae4e2d453fb97886d68201ca1df24a95ec2731999c2c3ba955484827ca722815c2fa4c85937334819cf2be37ebe6d1e9e26be92d6f62de3c8d48466d20d80699aef9e2957a56fe3af1236c7d0cc709