*.x.sandia.gov

- Sandia National Laboratories -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 23:5d:cf:d1:f4:64:26:a7:a9:96:e0:3e:ae:25:f4:42 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sandia National Laboratories

Organization: Sandia National Laboratories
Organization unit: Adversarial Modeling and Penetration Testing
Address: 1515 Eubank Blvd SE
Postal code: 87123
State / Province: New Mexico
Locality: Albuquerque
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 23:5d:cf:d1:f4:64:26:a7:a9:96:e0:3e:ae:25:f4:42
Serial Number (int): 47010078553425133419233367641192526914
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ba:c3:d7:4a:52:19:63:cd:b5:83:4c:88:f6:f6:c3:82:79:94:9b:1d
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): cf:56:fe:79:51:b4:72:4f:4c:e5:08:5b:16:a9:3e:1d:75:10:29:11
Fingerprint (sha256): 4d:84:97:b5:af:55:cf:83:69:18:46:54:ba:cd:ec:5e:88:4b:75:34:db:32:fa:bd:3f:83:24:e8:87:14:ac:c6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate *.x.sandia.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.x.sandia.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.x.sandia.gov
x.sandia.gov

Other certificates including the domain name sandia.gov

(limited to 100 certificates)
remote.sandia.gov
as1013snllx.sandia.gov
al.sandia.gov
fmdiri1.webdev.sandia.gov
h2zilla.sandia.gov
cchdsupport-son.sandia.gov
as3101snllx.sandia.gov
remote-ca.sandia.gov
ccmelcor.sandia.gov
esheta-dev.sandia.gov
accountpasswords.sandia.gov
ws1682lxz.sandia.gov
xfracas.sandia.gov
rocket.web.sandia.gov
hpcn-www.ca.sandia.gov
ebid-search.sandia.gov
slycat-scn.sandia.gov
rpwmesh-web2.sandia.gov
swas-q.sandia.gov
testing-dev.sandia.gov
kscredrepo.webdev.sandia.gov
msntstsvr.webdev.sandia.gov
accountpasswords.sandia.gov
vast.sandia.gov
primavera.webqual.sandia.gov
xfracas.sandia.gov
isp.sandia.gov
nts.webdev.sandia.gov
psc03nma.sandia.gov
eimsiis.sandia.gov
nagios.gibson.sandia.gov
as3012snllx.sandia.gov
cobrap6jobs.webqual.sandia.gov
as1019snllx.sandia.gov
oud1.webdev.sandia.gov
ebprod.sandia.gov
safer.sandia.gov
wls122emw3.web.sandia.gov
ebwebe2.web.ca.sandia.gov
terminal.web.ca.sandia.gov
catest4.webdev.ca.sandia.gov
foobarmsn.webdev.sandia.gov
cbapce2.webdev.sandia.gov
cert.sandia.gov
wls122emw1.web.sandia.gov
as1008snllx.sandia.gov
radtrain.sandia.gov
gms-webhooks.sandia.gov
*.sandia.gov
datasea-qual.sandia.gov
sregistry.ca.sandia.gov
ebapce2.webdev.ca.sandia.gov
ux-registry.sandia.gov
nwisapiqual.sandia.gov
rtc.sandia.gov
met-eoc.sandia.gov
ick.sandia.gov
vzadmi1.webdev.sandia.gov
tagnsdd.sandia.gov
ws451snlnt.sandia.gov
wildfly27psf.webdev.sandia.gov
*.sandia.gov
ickdev.sandia.gov
msnfoobar.webdev.sandia.gov
wls122emw3.webqual.sandia.gov
moveitmobile-d.sandia.gov
mlserver-dev.sandia.gov
wcvis-q.sandia.gov
pointtest.ca.sandia.gov
rp-linux01.ca.sandia.gov
supplierportal-qual.sandia.gov
dancer.ca.sandia.gov
msntstrostra.webdev.sandia.gov
fmsoai1.webdev.sandia.gov
caf.web.sandia.gov
prodtools.sandia.gov
dhs2.ca.sandia.gov
ebid-role.sandia.gov
eo12333-qual.sandia.gov
sip.sandia.gov
vnge.sandia.gov
foiax.sandia.gov
sccmexternal.sandia.gov
lb-qual-2.sandia.gov
dancer.ca.sandia.gov
getridofit-p.sandia.gov
ebid-help.sandia.gov
range-vpn-1.sandia.gov
hackmd.sandia.gov
lapsmq15.webdev.sandia.gov
ebfrmi2.webdev.ca.sandia.gov
config1.ca.sandia.gov
nexus.web.sandia.gov
ebccmi1.webqual.sandia.gov
map.sandia.gov
supplierportal-dev.sandia.gov
tagnsdd.sandia.gov
fmfnr.webqual.sandia.gov
870dev.sandia.gov
nexus.web.sandia.gov

Certificate

The complete raw certificate details for *.x.sandia.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47010078553425133419233367641192526914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '87123'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albuquerque'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1515 Eubank Blvd SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandia National Laboratories'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adversarial Modeling and Penetration Testing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.x.sandia.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766878175045978344043669205099322806894844187882373330991358937076373175075660090961859700907018937213232436584587095862624496320963900698882336913798700338501339458084812896527835759268868704026039032657296550629563676083531251884277353337340358838513245056891432505043419755754145099650577325311003065956433194670303946948584885211628202014519481861290297453576974959957360883637433152584952062351185328995878407735919278649912322349461135615098921101769881668557512762919258059072123463929740678886106223680695081760937015616570826314926889038877320623478556343397456806345693722138347004932942624036842671011887861084525587318380312130644923444168583058343627971364091087808716525400594130095032173460263238008426675428887317597786649816241350620360399510719703640259294064935504175811892275681033616907898026561433372826420817872671761313623379738907173231053058452766409411216296713898009097560431632792199442098726476513053800804668868470543684425758588637701912150365993303591348491180429126445374484785700494178466479602591703859400780859764701348739337080644364882607051901430363931961334974043116937984701575456039287097812986387978441614515937346293303305736249527278202783367751864335962628122996514471685122655544168971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bac3d74a521963cdb5834c88f6f6c38279949b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x.sandia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x.sandia.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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