*.synergyretailsupport.co.uk

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 51:1d:83:e5:25:65:ce:b0:4b:3f:b3:77 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.synergyretailsupport.co.uk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 51:1d:83:e5:25:65:ce:b0:4b:3f:b3:77
Serial Number (int): 25103967501306210824407200631
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 94:41:84:9b:f9:9b:02:26:d4:04:d2:4f:da:9f:db:0e:fe:fa:1f:06
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): be:5c:e7:d6:23:1b:89:43:fa:38:93:13:ba:a6:45:a3:49:c5:62:07
Fingerprint (sha256): 51:62:b9:d1:90:e0:07:57:b3:5d:92:6f:6b:4d:c2:51:96:75:25:1b:67:48:08:77:85:5e:da:09:e7:44:df:64

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.synergyretailsupport.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.synergyretailsupport.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.synergyretailsupport.co.uk
synergyretailsupport.co.uk

Other certificates including the domain name synergyretailsupport.co.uk

(limited to 100 certificates)
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
service.littlegarth.org
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
*.synergyretailsupport.co.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
support.homeinstead.ie
*.synergyretailsupport.co.uk
service.littlegarth.org
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
*.synergyretailsupport.co.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
srsp.synergyretailsupport.co.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
servicedesk.am-labor.de
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni.cloudflaressl.com
sni157971.cloudflaressl.com
servicedesk.christs.cam.ac.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
servicedesk.christs.cam.ac.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
*.synergyretailsupport.co.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
*.synergyretailsupport.co.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni.cloudflaressl.com
servicedesk.christs.cam.ac.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
service.littlegarth.org
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
servicedesk.synergyretailsupport.co.uk
sni157971.cloudflaressl.com
*.synergyretailsupport.co.uk
sni157971.cloudflaressl.com
sni157971.cloudflaressl.com
servicedesk.christs.cam.ac.uk
*.synergyretailsupport.co.uk

Certificate

The complete raw certificate details for *.synergyretailsupport.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgIMUR2D5SVlzrBLP7N3MA0GCSqGSIb3DQEBCwUAMFUxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH
bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDYxODA1MTI0
MFoXDTI1MDcyMDA1MTIzOVowJzElMCMGA1UEAwwcKi5zeW5lcmd5cmV0YWlsc3Vw
cG9ydC5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKTqXY3m
l78a/ykgtpROQlRTC/x63Sv6S0X3Z16zZQnWrrbmF/dgFM70eqAru+Ke42c9FWjf
88S1VkIL90etjVkDviET+9kjDY6eCZQH91M+FivBiMVaaGHJHfBg/A8UGvoKn7RU
QIVs8BpmMLCsFo2L8ggRkxFc5hyNUqI6MT4M29vtwvknJRTX2wDVc7EXRhgmeijw
cG1bSpPFKOyIDb6yz17skkMF5b2NwLOc9zRzHTycp2whestUu979DFXkPON2Dp5L
CyqJ00YkxTrlviHL4+psBxiLn8nPjKG+tXOWwRsOQZCKtl6YNkXCECHIGVSoOemi
XaEvkeGFMgR+Ct8CAwEAAaOCA4QwggOAMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMB
Af8EAjAAMIGZBggrBgEFBQcBAQSBjDCBiTBJBggrBgEFBQcwAoY9aHR0cDovL3Nl
Y3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NnY2NyNmFscGhhc3NsY2EyMDIz
LmNydDA8BggrBgEFBQcwAYYwaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nn
Y2NyNmFscGhhc3NsY2EyMDIzMFcGA1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQB
oDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v
cmVwb3NpdG9yeS8wRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC5nbG9iYWxz
aWduLmNvbS9nc2djY3I2YWxwaGFzc2xjYTIwMjMuY3JsMEMGA1UdEQQ8MDqCHCou
c3luZXJneXJldGFpbHN1cHBvcnQuY28udWuCGnN5bmVyZ3lyZXRhaWxzdXBwb3J0
LmNvLnVrMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAW
gBS9BbfzipM8c8t5+g+FEqF3lhiRdDAdBgNVHQ4EFgQUlEGEm/mbAibUBNJP2p/b
Dv76HwYwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AA3h8jAr0w3BQGISCepV
LvxHdHyx1+kw7w5CHrR+Tqo0AAABkCnC+nEAAAQDAEcwRQIhANfIUDaNkywLfWaT
MM2sAQ8tvmGQqPllRbXxGnyiphSpAiBzc6BwHkE6S+/75hD+VReWG+T6CGWnccCR
5nY08pUliAB3AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABkCnC
+nkAAAQDAEgwRgIhAMerOiYQ6b7QQb3pTLyIMe2ov7L8X+lFbHxQ3a5CObcIAiEA
zTS4QcaBfF4zgk0m+9GskAm4oALSWawiL5K6KZdyyM0AdgDd3Mo0ldfhFgXnlTL6
x5/4PRxQ39sAOhQSdgosrLvIKgAAAZApwvqVAAAEAwBHMEUCIDt3+Sd3hRa24ZuN
1Z54y5Plc75OIfghA1GzfJeE+4eLAiEA1Af8b9EYxOj61n+9enK4601trBYKLm0t
UX65GmkTrC8wDQYJKoZIhvcNAQELBQADggEBAIkh730vWiQOLELtBWpnFVNKYnMv
2KtnRw3RO3O7OkBM+BK0XRSXWxaaWxrAfhwGANAQ17Wvx1DJ+y894T2ol0NZ5Ilc
jRY4cCOECQIeTZ+aW/SXN1S9npZqKB8oAyq1/l0urv2+r2JU04KPgFEXb5RBpMWM
Cx4/ESPwKviU+ElokjmAsqgYI3+IyThuYBll8XcHqb2f2vRK/5YyTVkETuMR9BCV
yM1EKW1C4bFJOIEYqW4LiTHIwt/WFmb9zmXELcYpdUbHnEdjy7+0TAdbaPVLgfnL
BtxHmcXJZMJRqSpEEbPrvRxjxRCft4j1geYtCbIKQpiabDEmUMLRjoxZEYU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOpdjeaXvxr/KSC2lE5C
VFML/HrdK/pLRfdnXrNlCdautuYX92AUzvR6oCu74p7jZz0VaN/zxLVWQgv3R62N
WQO+IRP72SMNjp4JlAf3Uz4WK8GIxVpoYckd8GD8DxQa+gqftFRAhWzwGmYwsKwW
jYvyCBGTEVzmHI1SojoxPgzb2+3C+SclFNfbANVzsRdGGCZ6KPBwbVtKk8Uo7IgN
vrLPXuySQwXlvY3As5z3NHMdPJynbCF6y1S73v0MVeQ843YOnksLKonTRiTFOuW+
Icvj6mwHGIufyc+Mob61c5bBGw5BkIq2Xpg2RcIQIcgZVKg56aJdoS+R4YUyBH4K
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25103967501306210824407200631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 05:12:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-20 05:12:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.synergyretailsupport.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20818651923444201659810244285288697716301734942665505872892479865800748298755662071884481510934408603346126435157236528626956000010857480252364725095984821544208398344797012483355685838733859065792621687213246722233550679618407388695791310915437304348498500285226898963193868773401778019804624312140839129829079927837662832070016687946023845376196747173078036600094328696731160761407925507095359095151140682310442083297436787648694501255664375203411387022004833815600004206450667470952841410035648664185676810440718556271942265219403921102197557475182066444271065763322249223605624369394633794990374307129301829290719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synergyretailsupport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergyretailsupport.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9441849bf99b0226d404d24fda9fdb0efefa1f06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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