*.stable.cz
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 5c:bc:73:59:5e:a0:e9:94:e9:ae:80:91 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
Certificate Subject
CN=*.stable.cz
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 5c:bc:73:59:5e:a0:e9:94:e9:ae:80:91Serial Number (int): 28700443678375755838498177169
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: a3:86:18:c2:dd:5c:d7:10:9d:95:e3:85:ee:19:96:d9:0a:d0:bc:36
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): 6c:98:d1:be:0b:55:dd:19:c5:9b:24:ac:ab:ba:64:2d:d8:74:39:a3
Fingerprint (sha256): 56:7e:7b:8d:df:73:2a:dd:29:08:c0:27:d3:15:d4:c1:af:82:4d:1c:a5:b1:81:07:85:b4:aa:e0:34:73:2a:22
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate *.stable.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.stable.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.stable.cz
stable.cz
stable.cz
Other certificates including the domain name stable.cz
(limited to 100 certificates)
*.stable.cz
mail.stable.cz
vpn.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
www.webmail.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
*.stable.cz
vpn.stable.cz
webadmin.stable.cz
metabase.adapteeshop.stable.cz
klerk.stable.cz
klerk.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
vpn.stable.cz
klerk.stable.cz
platba.stable.cz
*.stable.cz
*.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
detskydum.cz
dns.stable.cz
percona.stable.cz
*.stable.cz
zkouska-jedenact.stable.cz
vapp.cz.david.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
vpn.stable.cz
percona.stable.cz
stable.cz
www.webmail.stable.cz
stable.cz
stable.cz
stable.cz
vpn.stable.cz
vpn.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
stable.cz
cdn.stable.cz
percona.stable.cz
dns.stable.cz
vpn.stable.cz
www.fitham.cz.novyweb6.stable.cz
klerk.stable.cz
percona.stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
percona.stable.cz
vpn.stable.cz
vapp.cz.david.stable.cz
klerk.stable.cz
www.fitham.cz.novyweb6.stable.cz
slevomat.percona.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
zkouska-jedna.stable.cz
stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
detskydum.cz
detskydum.cz
vpn.stable.cz
vpn.stable.cz
mail.stable.cz
vapp.cz.david.stable.cz
metabase.adapteeshop.stable.cz
vapp.cz.david.stable.cz
percona.stable.cz
klerk.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
klerk.stable.cz
klerk.stable.cz
vpn.stable.cz
*.stable.cz
percona.stable.cz
vpn.stable.cz
vpn.stable.cz
mail.stable.cz
vpn.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
www.webmail.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
*.stable.cz
vpn.stable.cz
webadmin.stable.cz
metabase.adapteeshop.stable.cz
klerk.stable.cz
klerk.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
vpn.stable.cz
klerk.stable.cz
platba.stable.cz
*.stable.cz
*.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
detskydum.cz
dns.stable.cz
percona.stable.cz
*.stable.cz
zkouska-jedenact.stable.cz
vapp.cz.david.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
vpn.stable.cz
percona.stable.cz
stable.cz
www.webmail.stable.cz
stable.cz
stable.cz
stable.cz
vpn.stable.cz
vpn.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
stable.cz
cdn.stable.cz
percona.stable.cz
dns.stable.cz
vpn.stable.cz
www.fitham.cz.novyweb6.stable.cz
klerk.stable.cz
percona.stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
percona.stable.cz
vpn.stable.cz
vapp.cz.david.stable.cz
klerk.stable.cz
www.fitham.cz.novyweb6.stable.cz
slevomat.percona.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
zkouska-jedna.stable.cz
stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
detskydum.cz
detskydum.cz
vpn.stable.cz
vpn.stable.cz
mail.stable.cz
vapp.cz.david.stable.cz
metabase.adapteeshop.stable.cz
vapp.cz.david.stable.cz
percona.stable.cz
klerk.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
klerk.stable.cz
klerk.stable.cz
vpn.stable.cz
*.stable.cz
percona.stable.cz
vpn.stable.cz
vpn.stable.cz
Certificate
The complete raw certificate details for *.stable.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgIMXLxzWV6g6ZTproCRMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTIxMTIzMTA4MjEyM1oXDTIzMDIw MTA4MjEyM1owFjEUMBIGA1UEAwwLKi5zdGFibGUuY3owggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCs0Lbrl02v78BT1HcetsZDZ8YzxbYUvaTSjRfDyen9 eqpMrDTB8May4ULFwWU+HBj6zNGwgeVHNNZP4vxW5Ekq9Sm28M2TxaoP0nCwxcdn 77DaQxKcWvFk04QE6OsfH1TN70dLuu2C4Hk8wAIgH0xMmFYFLVNiKxob17YP7FEK c7aoLWd1MTPRTcESDHZKtzcEajvYlHFBWZ3efvUZy2MyqyAJLeNvbLAe65eGZxvU DuBVs4rX+l12NcD11obunsQnh2woh2k7A/Zw2TpT5mdz09L5kTt9GeIwYKLzwbPk tg4MWJ4izKMtWXGoFv2Dx/tU+mQ53gNruaIw1od9sddrAgMBAAGjggNJMIIDRTAO BgNVHQ8BAf8EBAMCBaAwgYkGCCsGAQUFBwEBBH0wezBCBggrBgEFBQcwAoY2aHR0 cDovL3NlY3VyZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2FscGhhc2hhMmcycjEu Y3J0MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nh bHBoYXNoYTJnMjBXBgNVHSAEUDBOMEIGCisGAQQBoDIBCgowNDAyBggrBgEFBQcC ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EM AQIBMAkGA1UdEwQCMAAwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NybDIuYWxw aGFzc2wuY29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMCEGA1UdEQQaMBiCCyouc3Rh YmxlLmN6gglzdGFibGUuY3owHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MB8GA1UdIwQYMBaAFPXN1TwIUPlqTzq3l9pWg+Zp0mj3MB0GA1UdDgQWBBSjhhjC 3VzXEJ2V44XuGZbZCtC8NjCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA6D7Q 2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAF+D5RTPwAABAMARzBFAiEA s0XJyfiEeXXTWAlH3IW6jl0cF7s/aG0wsxG0pl4kx1MCIB44TiN/OnRl6hzYFV+N FiHxCbB1YHT04WF72YXYASVJAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAF+D5RSCwAABAMARzBFAiEA0A4rqeRkO4EyEIk3+Gf9tvN1ErNe6PGU tr5CncoDy0oCIDWP2tELZXlsq1oFrlFxKOGL7jJCOEqwSLLii2KPWVstAHcANc8Z G7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAF+D5RSoAAABAMASDBGAiEA rCgw9R40WgDmoeurhOutreTMiWLDCqf/pJFPSeAXGvsCIQDL5+Qs99+I80LyihRY 511uOQ2g1wAHj7Ef5pbwqp/kDTANBgkqhkiG9w0BAQsFAAOCAQEAVeNCB3ZoI2mX BABR42I81eANgsghizK7/9mgS3c7OcL6qJFd1LKKyU+LgCzlyKNZCkolUo7QSfeV h/Mk2Y6j3vvQfZYIMF0bOYhMkOMFyZ7jdywYaHSh4kdR9UXfZk/ZV8250tFK6D2L +eARBTv8Fj++AdGVjxUruT4FNOunNoCS0H8LIefjHCUfWijY+XiS7kJXUtGOZx/N yjLxDbgAlhO26bFw92yA8E7Xrk9gjor7/JLSmOMIFnM4M1nuAz9rMRSkC1BVktOW 2DuuteBeXNAM8L0VQj9ItYbD2v6fahW6BfzMopRBLrkye8OxMILwGRZ4hGjetA11 qTrxsMboog== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNC265dNr+/AU9R3HrbG Q2fGM8W2FL2k0o0Xw8np/XqqTKw0wfDGsuFCxcFlPhwY+szRsIHlRzTWT+L8VuRJ KvUptvDNk8WqD9JwsMXHZ++w2kMSnFrxZNOEBOjrHx9Uze9HS7rtguB5PMACIB9M TJhWBS1TYisaG9e2D+xRCnO2qC1ndTEz0U3BEgx2Src3BGo72JRxQVmd3n71Gctj MqsgCS3jb2ywHuuXhmcb1A7gVbOK1/pddjXA9daG7p7EJ4dsKIdpOwP2cNk6U+Zn c9PS+ZE7fRniMGCi88Gz5LYODFieIsyjLVlxqBb9g8f7VPpkOd4Da7miMNaHfbHX awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 28700443678375755838498177169 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-31 08:21:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-01 08:21:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stable.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21815909425973039860906527150040819992068689910883226953531331748204430132062990663853222466367142069598267248319576069573634169639168117489338026105120041151122782565469302988716634465007975307267744537271757717535582591004649107699301883583533051419954905764664817813405232102979428979930917845133145752766700209692986837889613691697242100311578422886036906757522079369107386229118228212173781068127723548927811532448432183975497615893600125532712862078114810547668316025345683616618816751811218340402434090293643823120680089142975689125688774758319987073969337569887325253996116238338825404617544952590211107379051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stable.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stable.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a38618c2dd5cd7109d95e385ee1996d90ad0bc36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0055e342077668236997040051e3623cd5e00d82c8218b32bbffd9a04b773b39c2faa8915dd4b28ac94f8b802ce5c8a3590a4a25528ed049f79587f324d98ea3defbd07d9608305d1b39884c90e305c99ee3772c186874a1e24751f545df664fd957cdb9d2d14ae83d8bf9e011053bfc163fbe01d1958f152bb93e0534eba7368092d07f0b21e7e31c251f5a28d8f97892ee425752d18e671fcdca32f10db8009613b6e9b170f76c80f04ed7ae4f608e8afbfc92d298e3081673383359ee033f6b3114a40b505592d396d83baeb5e05e5cd00cf0bd15423f48b586c3dafe9f6a15ba05fccca294412eb9327bc3b13082f01916788468deb40d75a93af1b0c6e8a2