ASA-User.ustranscom.mil

- U.S. Government -

Issued by DOD ID SW CA-37

About this certificate

This digital certificate with serial number 03:a2:11 was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificates issued after 1 March 2018, but prior to 1 September 2020, MUST NOT have a Validity Period greater than 825 days. (BRs: 6.3.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:11
Serial Number (int): 238097
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 84:4c:cc:2c:42:ef:b0:92:10:25:27:aa:73:2e:d6:90:7a:2a:91:69
AuthorityKeyId: 16:24:7e:f7:2d:c1:ef:92:3f:be:44:e7:54:5e:e9:fe:17:ba:f3:a1

Fingerprint (sha1): d6:2e:8b:19:09:16:ef:d0:a8:bf:25:d3:61:5f:f4:fa:54:74:e2:74
Fingerprint (sha256): 53:7f:5b:20:d6:57:8a:1f:db:a4:18:55:46:9e:8b:55:b2:01:66:83:de:20:77:9e:0f:76:03:8e:cb:20:b0:9c

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_37.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_37.crl

Check the revocation status for certificate ASA-User.ustranscom.mil

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ASA-User.ustranscom.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ASA-User.ustranscom.mil

Other certificates including the domain name ustranscom.mil

(limited to 100 certificates)
pat.staging.sddc.ustranscom.mil
gtscleair.cre.sddc.ustranscom.mil
citrix.igc.ustranscom.mil
icodesgs-slp9.coop.sddc.army.mil
gtsclec08.cre.sddc.ustranscom.mil
extpsa.trac2es.ustranscom.mil
icodes.albany.sddc.army.mil
trac2eswbt.trac2es.ustranscom.mil
extappp1.trac2es.ustranscom.mil
icodes.albany.coop.sddc.army.mil
extidma.exercise.trac2es.ustranscom.mil
icodesgs-user3.cpe.sddc.ustranscom.mil
www.uat.igc-a.ustranscom.mil
beta.distribute.mil
gtsclewtr.cre.sddc.ustranscom.mil
icodes-tmm.albany.sddc.army.mil
gtsclec10.cre.sddc.ustranscom.mil
gtsclec02.cre.sddc.ustranscom.mil
gtsclec09.cre.sddc.ustranscom.mil
tasa.trac2es.ustranscom.mil
dataservices.igc.ustranscom.mil
extappp4.trac2es.ustranscom.mil
its-stage.ustranscom.mil
www.dma.mil
tpsa.trac2es.ustranscom.mil
tasp.trac2es.ustranscom.mil
icodesgs-slp4.train.sddc.army.mil
extappp2.trac2es.ustranscom.mil
pat.sddc.ustranscom.mil
cris.transcom.mil
www.ustranscom.mil
extpsa.trac2es.ustranscom.mil
extwfa.trac2es.ustranscom.mil
www.dma.mil
icodes-tmm.albany.coop.sddc.army.mil
its-stage.ustranscom.mil
remote.p3i.ustranscom.mil
gtsclec13.cre.sddc.ustranscom.mil
icodes-user1.motsu.coop.sddc.army.mil
twfp.trac2es.ustranscom.mil
icodes.navajo.sddc.army.mil
www.dma.mil
icodesgs-slp4.coop.sddc.army.mil
pat.staging.sddc.ustranscom.mil
extwfa.trac2es.ustranscom.mil
josac.ustranscom.mil
extwfp.trac2es.ustranscom.mil
www.dma.mil
www.trac2es.ustranscom.mil
icodesgs-slp3.sddc.army.mil
icodesgs-master.coop.sddc.army.mil
icodes-user1.albany.sddc.army.mil
extpsp.trac2es.ustranscom.mil
icodesgs-ssdm1.cpe.sddc.ustranscom.mil
icodesgs-slp0.coop.sddc.army.mil
extasa.trac2es.ustranscom.mil
its-stage.ustranscom.mil
notifications.igc-a.ustranscom.mil
icodesgs-user3.cae.sddc.ustranscom.mil
extappa2.trac2es.ustranscom.mil
ASA-VIP
sg.igc.ustranscom.mil
gtsclec11.cre.sddc.ustranscom.mil
icodesgs-lps1.train.sddc.army.mil
www.ustranscom.mil
www.dma.mil
remote.igc-test.ustranscom.mil
icodesgs-slp0.sddc.army.mil
sg.igc-test.ustranscom.mil
gtsclec07.cre.sddc.ustranscom.mil
ww2.ustranscom.mil
cdeview.ustranscom.mil
josac.ustranscom.mil
requirements.igc-dev.ustranscom.mil
remote.p3i.ustranscom.mil
sg.igc-a.ustranscom.mil
sg.igc.ustranscom.mil
www.cpa.ustranscom.mil
platapp01.ustranscom.mil
oneway.av.igc.ustranscom.mil
coinscoopas.maf.ustranscom.mil
icodesgs-lps1.sddc.army.mil
icodesgs-slp3.coop.sddc.army.mil
extappp3.trac2es.ustranscom.mil
extidma.trac2es.ustranscom.mil
icodes-user1.albany.coop.sddc.army.mil
remote.igc-test.ustranscom.mil
oneway.av.igc.ustranscom.mil
cris.ustranscom.mil
icodesgs-slp1.coop.sddc.army.mil
icodesgs-slp2.train.sddc.army.mil
gtsclec14.cre.sddc.ustranscom.mil
icodesgs.coop.sddc.army.mil
gtsclec04.cre.sddc.ustranscom.mil
distribute.mil
www.ustranscom.mil
www.igc-test.ustranscom.mil
icodesgs-user1.coop.sddc.army.mil
extappa4.trac2es.ustranscom.mil
ASA-User.ustranscom.mil

Certificate

The complete raw certificate details for ASA-User.ustranscom.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEkDCCA3igAwIBAgIDA6IRMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVT
MRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0RvRDEMMAoGA1UE
CxMDUEtJMRgwFgYDVQQDEw9ET0QgSUQgU1cgQ0EtMzcwHhcNMTgwNzExMTgxODM1
WhcNMjEwNzExMTgxODM1WjBXMQswCQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBH
b3Zlcm5tZW50MQwwCgYDVQQLEwNEb0QxIDAeBgNVBAMTF0FTQS1Vc2VyLnVzdHJh
bnNjb20ubWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuodM6Io1
lN4jM5l7gwGET1UIahfsi6pcnN9SbxvCopNwM/daWUtBsM5Q2QupUTU28LVT/bV0
9gJ+4olj3sMTH6+tkfC3LxYwRT6jm+Er0Jtfjf1T/R/j8Tn5riX0pQnf0ItssJBK
nLro3dDzoaz5KCEsLz/+oxgkBBo/juIZf31VjEb6VVRyYeuk3quMJJyepb/Sohdi
yJqVWhxGX9/XjndRgGn4d+dDhkx6U0TFWCJ6k2k/RSpzmEQTT8L/gLMyfqBc31JJ
BUKQFZwb2R8dV7rgaSSJwjYphZrfPXjfjXi4FhdMIyOMl6rf21rMyHhxQv2lT+We
iSKdmd3rJFBPnQIDAQABo4IBXTCCAVkwHwYDVR0jBBgwFoAUFiR+9y3B75I/vkTn
VF7p/he686EwHQYDVR0OBBYEFIRMzCxC77CSECUnqnMu1pB6KpFpMGcGCCsGAQUF
BwEBBFswWTA1BggrBgEFBQcwAoYpaHR0cDovL2NybC5kaXNhLm1pbC9zaWduL0RP
RElEU1dDQV8zNy5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6Ly9vY3NwLmRpc2EubWls
MA4GA1UdDwEB/wQEAwIFoDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLmRp
c2EubWlsL2NybC9ET0RJRFNXQ0FfMzcuY3JsMCIGA1UdEQQbMBmCF0FTQS1Vc2Vy
LnVzdHJhbnNjb20ubWlsMBYGA1UdIAQPMA0wCwYJYIZIAWUCAQsnMCcGA1UdJQQg
MB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUIAgIwDQYJKoZIhvcNAQELBQAD
ggEBACin5QiDQXxK7V/xgdx4U0KcAe8E7LuaxXaJUPX2iZPmjtsm+niZelp+/jbC
NRvz+3Pii/17acNwzm7gs1Bl42BZa8OA29YIYUpjIv1GGnmRejBexWpo6MOOObtZ
MZV5HsMSJGbgoL9C7cjWwj2b0rJij+8ncHevIvhhs/zWtZ2tP7oyqoZJETdKlOA1
MrMyu4qbMUaIT3mBR3EPXayV9SscaFUOeX2RMIhtmYGKsAD98WfuGkIAvnqXm710
DAuyznk1GYBFJpeOYyQYjy6th4A019uQmUQYJxcdWSSVk1BpaKWHiv5gPd5r5XYN
pYuPITRUdifRVrdV4Gevv41sjGg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuodM6Io1lN4jM5l7gwGE
T1UIahfsi6pcnN9SbxvCopNwM/daWUtBsM5Q2QupUTU28LVT/bV09gJ+4olj3sMT
H6+tkfC3LxYwRT6jm+Er0Jtfjf1T/R/j8Tn5riX0pQnf0ItssJBKnLro3dDzoaz5
KCEsLz/+oxgkBBo/juIZf31VjEb6VVRyYeuk3quMJJyepb/SohdiyJqVWhxGX9/X
jndRgGn4d+dDhkx6U0TFWCJ6k2k/RSpzmEQTT8L/gLMyfqBc31JJBUKQFZwb2R8d
V7rgaSSJwjYphZrfPXjfjXi4FhdMIyOMl6rf21rMyHhxQv2lT+WeiSKdmd3rJFBP
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 238097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-37'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 18:18:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-11 18:18:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASA-User.ustranscom.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23547043849060638424623150699493192055226620804141504363784699334138097937510542460382537642795593896021162160683958945401286491992179101839252361644030080887339555375459770280919050979507981514951558294038141883971786801564487755945724041176663234191501754727235860751342562729288955674940865671753186345539900980404918202441590225774644448422923620865228414089628164521438582568987881987023710386031819893167438144931397667393619107547415123351409502239736347918973791403691059507321943729250648264566191667596766748624036638979199811742698316778999171105388343172696313421461423869136895374144201846212887147728797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 16247ef72dc1ef923fbe44e7545ee9fe17baf3a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							844ccc2c42efb092102527aa732ed6907a2a9169
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_37.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_37.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ASA-User.ustranscom.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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