connect.ceejay.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 29:a4:43:44:35:04:8d:22:c2:4f:db:f4 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connect.ceejay.com,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:a4:43:44:35:04:8d:22:c2:4f:db:f4
Serial Number (int): 12887466893845229845192104948
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 37:ae:5b:d0:63:fc:47:67:34:80:68:ba:64:fa:d2:76:ec:b3:f5:57
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): e8:5c:bf:65:60:19:54:28:4e:74:13:a1:14:b0:88:99:79:8c:29:bf
Fingerprint (sha256): 4f:84:00:c6:15:f0:30:1a:ee:7f:55:b9:82:ea:cb:0a:33:87:74:0a:84:cb:a9:d6:dd:41:6c:33:02:4a:5b:aa

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate connect.ceejay.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.ceejay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.ceejay.com

Other certificates including the domain name ceejay.com

(limited to 100 certificates)
status.ceejay.com
ssl386989.cloudflaressl.com
bi.ceejay.com
ssl386988.cloudflaressl.com
ssl386987.cloudflaressl.com
ssl386987.cloudflaressl.com
ceejay.com
bi.ceejay.com
support.smartshift-robotics.com
ceejay.com
ssl386989.cloudflaressl.com
support.for-sight.co.uk
connect.ceejay.com
ceejay.com
ceejay.com
bi.ceejay.com
ssl386987.cloudflaressl.com
messageintelligence.ceejay.com
support.for-sight.co.uk
bi.ceejay.com
bi.ceejay.com
connect.ceejay.com
ceejay.com
ssl386988.cloudflaressl.com
ssl386989.cloudflaressl.com
bi.ceejay.com
ssl386988.cloudflaressl.com
ceejay.com
ssl386989.cloudflaressl.com
ssl386987.cloudflaressl.com
ssl386989.cloudflaressl.com
bi.ceejay.com
ssl386989.cloudflaressl.com
ssl386988.cloudflaressl.com
ceejay.com
connect.ceejay.com
support.for-sight.co.uk
ceejay.com
ssl386988.cloudflaressl.com
bi.ceejay.com
ceejay.com
backupintelligence.ceejay.com
ssl386989.cloudflaressl.com
ceejay.com
ssl386988.cloudflaressl.com
ssl386989.cloudflaressl.com
backupintelligence.ceejay.com
ssl386989.cloudflaressl.com
ceejay.com
help.ceejay.com
ssl386987.cloudflaressl.com
bi.ceejay.com
help.ceejay.com
support.for-sight.co.uk
help.ceejay.com
ssl386987.cloudflaressl.com
ceejay.com
ssl386988.cloudflaressl.com
ssl386987.cloudflaressl.com
ceejay.com
help.ceejay.com
ssl386989.cloudflaressl.com
ssl386987.cloudflaressl.com
bi.ceejay.com
ssl386989.cloudflaressl.com
www.ceejay.com
messageintelligence.ceejay.com
status.ceejay.com
ssl386987.cloudflaressl.com
ceejay.com
ceejay.com
lab.ceejay.com
*.ceejay.com
bi.ceejay.com
ssl386987.cloudflaressl.com
ceejay.com
status.ceejay.com
support.smartshift-robotics.com
ssl386988.cloudflaressl.com
ceejay.com
ssl386988.cloudflaressl.com
ceejay.com
bi.ceejay.com
ceejay.com
ci.ceejay.com
ceejay.com
ice.ceejay.com
bi.ceejay.com
ceejay.com
ceejay.com
ceejay.com
bi.ceejay.com
ssl386988.cloudflaressl.com
bi.ceejay.com
help.ceejay.com
ceejay.com
ssl386988.cloudflaressl.com
help.ceejay.com
ssl386989.cloudflaressl.com
ssl386989.cloudflaressl.com

Certificate

The complete raw certificate details for connect.ceejay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVDCCBjygAwIBAgIMKaRDRDUEjSLCT9v0MA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE3MDIxNTE2MDIzNVoXDTE4MDIx
NjE2MDIzNVowTTELMAkGA1UEBhMCR0IxITAfBgNVBAsTGERvbWFpbiBDb250cm9s
IFZhbGlkYXRlZDEbMBkGA1UEAwwSY29ubmVjdC5jZWVqYXkuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gmrpZq2/elvHNq4X213HMew5FnVuh5s
8bh2uYAjkXyk8BNOboWYxLRmfRgsiOFizV5Kd+5/361fsBWI9j1q4Qlb7CFYDvKU
Gzj5ShdSC5V8YZtPJKfqygO+onD8j7X5PBY0eOoQi5AsyWM+A23jXkU99wfdMIWv
qmi+sA8fIVfi/En84q5Nd5lT2QucXnQogCSdsIHgK7IzDJ06A9lznu2BoQ/nuJoS
Wt/eUkCMV9+ni4O0M+CMSDZ9GcVtOqzNda6/Ss6pL6w98YKbb6ZHx+diqZyzSGhb
YjrLqYUIbBecFa/MAxWHiwx1nzbTmV/ytqREeDW3KE70ZcgVbmHnAQIDAQABo4IE
MzCCBC8wDgYDVR0PAQH/BAQDAgWgMIGJBggrBgEFBQcBAQR9MHswQgYIKwYBBQUH
MAKGNmh0dHA6Ly9zZWN1cmUyLmFscGhhc3NsLmNvbS9jYWNlcnQvZ3NhbHBoYXNo
YTJnMnIxLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AyLmdsb2JhbHNpZ24u
Y29tL2dzYWxwaGFzaGEyZzIwVwYDVR0gBFAwTjBCBgorBgEEAaAyAQoKMDQwMgYI
KwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkv
MAgGBmeBDAECATAJBgNVHRMEAjAAMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9j
cmwyLmFscGhhc3NsLmNvbS9ncy9nc2FscGhhc2hhMmcyLmNybDAdBgNVHREEFjAU
ghJjb25uZWN0LmNlZWpheS5jb20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB0GA1UdDgQWBBQ3rlvQY/xHZzSAaLpk+tJ27LP1VzAfBgNVHSMEGDAWgBT1
zdU8CFD5ak86t5faVoPmadJo9zCCAm0GCisGAQQB1nkCBAIEggJdBIICWQJXAHYA
u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFaQoLa6AAABAMARzBF
AiBJiv7tnE5yPQF/OAhF0JnUqnj1qF9qw8q0LszfiX6/GwIhAKSU2h9JXBMQHb86
0yx+s643aLYj+TY0c3o+96n/6ZflAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4
43fNDsgN3BAAAAFaQoLd3AAABAMARzBFAiAptU5MbGGilEPBROYIqY1Pzb8gclHg
vJ4cbp4AKNB4yAIhAN9fT/CktCCc/O/SOkfvMr0RkdVHnj2EMS2inS7Sr5BnAHYA
3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFaQoLfrAAABAMARzBF
AiAgZKmZMqrCE9SWIIr632JX50DQW4ridloONMrcGlIaDAIhAL1hNcL8Y9LdYRdw
MBFB68s3II7T6bWAXKkQKMJ90M0fAHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA
75SYVdaJ0N0AAAFaQoLfmAAABAMARjBEAiA18x2eGUTVgJDBkT5VTMHXlWsmhJ15
tiJ4n5vVmeZRiQIgCU6Zs/GZuIy3yJg5McbHB8bJv+aTVRauol6USU95Z7sAdgDu
S723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVpCguC0AAAEAwBHMEUC
IAY/yR7sQpep71m+MaOWSSD7hu2pPstC3RndpJOs4aLQAiEAsQWXkM+G2vZA3Cvg
nhVfi0z4ndzshroXetlqljRXbJwwDQYJKoZIhvcNAQELBQADggEBAAMS2eUipGf3
5bVfNiYRTAv9l6buIRkE3tf6SRM+SriNssN8XMp1B6kACv1lX26RiFX3aa/mUKDK
ehYoI08QNj++Y7452A57883D+tuI7AaJ63IeJGCZVQYy2SkuUAxNckyrhz48kdhl
4Sn7Y3epu5RyBjfS3RAn3W6fTe4L3kiqYLUco26BFpUKuq8zor9Ai6jI1oBgxptL
p4t3qZM4RkIp1iJDwIhUyvN9sdL5b1SAzbpNFkcqx5elPgSF6Y76P0zb4rNek3kO
gQUV1MbdezZxipteKNa2f7rRzWa9BbJGmMPFecObKBs4pe1bzZnaPMP7OUrEpxH1
rKpcqb0n6mQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gmrpZq2/elvHNq4X213
HMew5FnVuh5s8bh2uYAjkXyk8BNOboWYxLRmfRgsiOFizV5Kd+5/361fsBWI9j1q
4Qlb7CFYDvKUGzj5ShdSC5V8YZtPJKfqygO+onD8j7X5PBY0eOoQi5AsyWM+A23j
XkU99wfdMIWvqmi+sA8fIVfi/En84q5Nd5lT2QucXnQogCSdsIHgK7IzDJ06A9lz
nu2BoQ/nuJoSWt/eUkCMV9+ni4O0M+CMSDZ9GcVtOqzNda6/Ss6pL6w98YKbb6ZH
x+diqZyzSGhbYjrLqYUIbBecFa/MAxWHiwx1nzbTmV/ytqREeDW3KE70ZcgVbmHn
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12887466893845229845192104948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 16:02:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-16 16:02:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'connect.ceejay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27524719181748452984400152886669758729929826868766616620111668481108989701106361762425060793838438487856164825923995531625412730827092423318595755075754355137353579330496343881477318042494372090399928477621088894365713309974998900708459640543118523177955100570872313871082787244682350290401589327489895483764292965599245386135898709836351541256245775980685190965456544383518387022513131639890064378315758287919295835643897526200340060411891183344386181586606432139791156605373325678109927149401388991277828752619962547474355698725886126013795998432095810149916030687371549074368477705121502199235960800922224356878081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ceejay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37ae5bd063fc4767348068ba64fad276ecb3f557
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							0257007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015a4282dae800000403004730450220498afeed9c4e723d017f380845d099d4aa78f5a85f6ac3cab42eccdf897ebf1b022100a494da1f495c13101dbf3ad32c7eb3ae3768b623f93634737a3ef7a9ffe997e5007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a4282dddc0000040300473045022029b54e4c6c61a29443c144e608a98d4fcdbf207251e0bc9e1c6e9e0028d078c8022100df5f4ff0a4b4209cfcefd23a47ef32bd1191d5479e3d84312da29d2ed2af9067007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a4282dfac000004030047304502202064a99932aac213d496208afadf6257e740d05b8ae2765a0e34cadc1a521a0c022100bd6135c2fc63d2dd611770301141ebcb37208ed3e9b5805ca91028c27dd0cd1f0075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015a4282df980000040300463044022035f31d9e1944d58090c1913e554cc1d7956b26849d79b622789f9bd599e651890220094e99b3f199b88cb7c8983931c6c707c6c9bfe6935516aea25e94494f7967bb007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015a4282e0b400000403004730450220063fc91eec4297a9ef59be31a3964920fb86eda93ecb42dd19dda493ace1a2d0022100b1059790cf86daf640dc2be09e155f8b4cf89ddcec86ba177ad96a9634576c9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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