s000lpopenam40.m-team.be

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 1d:4d:60:75:a0:6e:d3:62:82:a4:71:c9 was issued on by GlobalSign nv-sa.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=s000lpopenam40.m-team.be

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:4d:60:75:a0:6e:d3:62:82:a4:71:c9
Serial Number (int): 9068608089941155262987792841
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 01:d3:e4:b8:6a:5e:af:a0:94:89:bd:c9:d7:e3:30:be:4d:4e:15:5d
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 47:cf:49:18:be:32:42:c4:32:e8:5d:99:bd:38:cb:c6:aa:df:06:db
Fingerprint (sha256): 4d:c6:65:7d:19:ce:24:90:74:45:29:7d:2e:6d:36:54:24:dd:b4:cb:23:b5:e2:2e:4b:55:32:e6:fc:bf:c9:47

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate s000lpopenam40.m-team.be

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s000lpopenam40.m-team.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s000lpopenam40.m-team.be
fes403.m-team.be
fes407.m-team.be
fes409.m-team.be
fes414.m-team.be
fes417.m-team.be

Other certificates including the domain name m-team.be

(limited to 100 certificates)
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
oobbackup.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mllm.fes400.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
fes400-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
access.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
mloz.fes500-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
bcmnotifications-mllm.m-team.be
mloz.fes500.m-team.be
api-mloz-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
api-mloz.ref-genesys.m-team.be
api-mllm-ref.m-team.be
mnnz.fes200.m-team.be
sni.cloudflaressl.com
fes400.m-team.be
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sip2.uc.m-team.be
openzorg-prod.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
sip.uc.m-team.be
fes400-integ.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
api-mloz.dev-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mloz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com

Certificate

The complete raw certificate details for s000lpopenam40.m-team.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIMHU1gdaBu02KCpHHJMA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yMzExMjgxMDQ2NDVa
Fw0yNDEyMjkxMDQ2NDRaMCMxITAfBgNVBAMTGHMwMDBscG9wZW5hbTQwLm0tdGVh
bS5iZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyxT4ebg7SS+1E0
KuvucpypV1NrIVS83WiF3Ddv+HQNjSLaveXAsTaFcmluh1F1O5F567ggOBmfxHVC
u+zJApOaedz4gdMxOroZreCzW5DZO+aVTkUe5ruW4bn9m6ugriBKRsueCQ1pwRQ8
LGnE397EMzd9tiBdXL8V3U/VkEuU8rtZgKxLjJonZuNtWalrZ9ijhHMiF5RHfBeF
6tLH7o8NcPeTYCCAfPgoYw4RavNJ+Hj/E2IXM74QDrAPRvL02DG0yRlOaMOBvttn
lxILcbVh4f553K0pbvTBxTfUDurT3BXBr6/pK+ZkF5zBgFUj69rCPgezO17dSZX7
WzvxRRsCAwEAAaOCAkYwggJCMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAA
MIGTBggrBgEFBQcBAQSBhjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3VyZS5n
bG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NnY2NyM2R2dGxzY2EyMDIwLmNydDA5Bggr
BgEFBQcwAYYtaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM2R2dGxz
Y2EyMDIwMFYGA1UdIARPME0wQQYJKwYBBAGgMgEKMDQwMgYIKwYBBQUHAgEWJmh0
dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATBB
BgNVHR8EOjA4MDagNKAyhjBodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2Nj
cjNkdnRsc2NhMjAyMC5jcmwwfQYDVR0RBHYwdIIYczAwMGxwb3BlbmFtNDAubS10
ZWFtLmJlghBmZXM0MDMubS10ZWFtLmJlghBmZXM0MDcubS10ZWFtLmJlghBmZXM0
MDkubS10ZWFtLmJlghBmZXM0MTQubS10ZWFtLmJlghBmZXM0MTcubS10ZWFtLmJl
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQNmMBz
f6u9vdlHS0mtCkoMrD7HfDAdBgNVHQ4EFgQUAdPkuGper6CUib3J1+Mwvk1OFV0w
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABBEzl0yF2M7
Ajjt2Ez49KnkCQ8rHZiblN652tJCgI5/A+vG+ecdqOnteUGNRa3v6XLoeZBVjLxG
uc7voDWjQg6ZHokqjR9i4R+xGgq9NPsznztar9fzSxvoiFpjTnntB7AWi0aiXRcg
FLGcztCEJ7wZL8vuVgroRrNo1bxnXb45n1G6tw7XNOLKtgYzUCM0zaCwH/j/+Lvl
89m1C2MTqfMdiQyHvZrhXwGXeujRg81vXDfZKgqeVjUcMJcBes4cJIznZCuzgNLs
fDjuOtvt3G8wpDJHRhWTW1vpjKoIQdqsQ3fHhiYOaSxvcyykRxfGd4gUNDLe1jd5
ukrfmVfBGuY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFPh5uDtJL7UTQq6+5y
nKlXU2shVLzdaIXcN2/4dA2NItq95cCxNoVyaW6HUXU7kXnruCA4GZ/EdUK77MkC
k5p53PiB0zE6uhmt4LNbkNk75pVORR7mu5bhuf2bq6CuIEpGy54JDWnBFDwsacTf
3sQzN322IF1cvxXdT9WQS5Tyu1mArEuMmidm421ZqWtn2KOEcyIXlEd8F4Xq0sfu
jw1w95NgIIB8+ChjDhFq80n4eP8TYhczvhAOsA9G8vTYMbTJGU5ow4G+22eXEgtx
tWHh/nncrSlu9MHFN9QO6tPcFcGvr+kr5mQXnMGAVSPr2sI+B7M7Xt1JlftbO/FF
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9068608089941155262987792841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 10:46:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-29 10:46:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's000lpopenam40.m-team.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19780610721361246639877484948447416729853422147055309028362454152224382966255254106631478283082852373476312457628591710695336901990928373346795798601614068761784605849585724746818538233267159560475130484110302813074244959814833134246091277152384418903786967747132463470327012310555665137284335685514002323538701111534935730435129422686044192872873003721137013616733170136890935770195147369863710040681171724148134297636660722059448488546005649569825282731895171131853087112594678088330960353082305574624895333974953645888218743432186350420379721341154327050450131543355753736841197645392828451747090419260812191417627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's000lpopenam40.m-team.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes403.m-team.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes407.m-team.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes409.m-team.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes414.m-team.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fes417.m-team.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01d3e4b86a5eafa09489bdc9d7e330be4d4e155d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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