*.nextep.com
Issued by GlobalSign GCC R6 AlphaSSL CA 2023
About this certificate
This digital certificate with serial number 67:ce:c1:64:fd:71:43:f9:10:ae:20:72 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.nextep.com
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 67:ce:c1:64:fd:71:43:f9:10:ae:20:72Serial Number (int): 32126908010107209602093162610
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 92:7e:79:d1:e8:76:ce:9c:a7:f2:c0:87:b7:ee:2d:e4:9b:39:ad:0c
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74
Fingerprint (sha1): 24:21:63:42:3a:9b:04:ae:58:55:5f:27:80:3c:d5:5d:ab:b2:74:d9
Fingerprint (sha256): 5c:2b:78:a1:5a:bb:03:88:50:bb:92:07:c5:4e:14:be:37:66:6c:17:08:0d:95:e6:01:8f:f6:09:b3:1c:87:46
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl
Check the revocation status for certificate *.nextep.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nextep.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nextep.com
nextep.com
nextep.com
Other certificates including the domain name nextep.com
(limited to 100 certificates)
survey.gradwell.com
go.nextep.com
survey.westernwindowsystems.com
supportsurvey.control4.com
akamai-san76.exacttarget.com
www.nextep.com
cody-test.getgetfeedbackback.com
akamai-san76.exacttarget.com
survey.boomtownroi.com
secure3.nextep.com
clients.nextep.com
mail.nextep.com
www.nextep.com
cloud.info.nextep.com
click.info.nextep.com
supportsurvey.control4.com
feedback.liftago.com
feedback.nanotempertech.com
customdomain.getfeedback.com
www.nextep.com
nexcors0.nextep.com
cloud.info.nextep.com
survey.westernwindowsystems.com
secure.nextep.com
survey.adstream.com
feedback.auditorservice.com
akamai-san76.exacttarget.com
customdomain.getfeedback.com
feedback.nextdc.com
feedback.auditorservice.com
clients.nextep.com
survey.gradwell.com
feedback.nextdc.com
secure3.nextep.com
*.nextep.com
go.nextep.com
cody-test.getgetfeedbackback.com
click.info.nextep.com
act.nextep.com
akamai-san76.exacttarget.com
click.info.nextep.com
surveys.nextep.com
*.nextep.com
enquete.pietervanforeest.nl
secure.nextep.com
*.nextep.com
feedback.liftago.com
secure6.nextep.com
www.nextep.com
akamai-san76.exacttarget.com
feedback.inap.com
*.nextep.com
clients.nextep.com
secure2.nextep.com
*.nextep.com
secure3.nextep.com
feedback.inap.com
survey.westernwindowsystems.com
go.nextep.com
supportsurvey.control4.com
feedback.voices.com
secure6.nextep.com
info.nextep.com
survey.westernwindowsystems.com
capability.enablese.com.au
feedback.voices.com
clients.nextep.com
view.info.nextep.com
view.info.nextep.com
certificates.getfeedback.com
feedback.esprigas.com
test-customdomain.getfeedback.com
nexcors0.nextep.com
feedback.esprigas.com
akamai-san76.exacttarget.com
akamai-san76.exacttarget.com
secure2.nextep.com
www.nextep.com
clients.nextep.com
test-customdomain.getfeedback.com
go.nextep.com
survey.westernwindowsystems.com
supportsurvey.control4.com
akamai-san76.exacttarget.com
www.nextep.com
cody-test.getgetfeedbackback.com
akamai-san76.exacttarget.com
survey.boomtownroi.com
secure3.nextep.com
clients.nextep.com
mail.nextep.com
www.nextep.com
cloud.info.nextep.com
click.info.nextep.com
supportsurvey.control4.com
feedback.liftago.com
feedback.nanotempertech.com
customdomain.getfeedback.com
www.nextep.com
nexcors0.nextep.com
cloud.info.nextep.com
survey.westernwindowsystems.com
secure.nextep.com
survey.adstream.com
feedback.auditorservice.com
akamai-san76.exacttarget.com
customdomain.getfeedback.com
feedback.nextdc.com
feedback.auditorservice.com
clients.nextep.com
survey.gradwell.com
feedback.nextdc.com
secure3.nextep.com
*.nextep.com
go.nextep.com
cody-test.getgetfeedbackback.com
click.info.nextep.com
act.nextep.com
akamai-san76.exacttarget.com
click.info.nextep.com
surveys.nextep.com
*.nextep.com
enquete.pietervanforeest.nl
secure.nextep.com
*.nextep.com
feedback.liftago.com
secure6.nextep.com
www.nextep.com
akamai-san76.exacttarget.com
feedback.inap.com
*.nextep.com
clients.nextep.com
secure2.nextep.com
*.nextep.com
secure3.nextep.com
feedback.inap.com
survey.westernwindowsystems.com
go.nextep.com
supportsurvey.control4.com
feedback.voices.com
secure6.nextep.com
info.nextep.com
survey.westernwindowsystems.com
capability.enablese.com.au
feedback.voices.com
clients.nextep.com
view.info.nextep.com
view.info.nextep.com
certificates.getfeedback.com
feedback.esprigas.com
test-customdomain.getfeedback.com
nexcors0.nextep.com
feedback.esprigas.com
akamai-san76.exacttarget.com
akamai-san76.exacttarget.com
secure2.nextep.com
www.nextep.com
clients.nextep.com
test-customdomain.getfeedback.com
Certificate
The complete raw certificate details for *.nextep.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIMZ87BZP1xQ/kQriByMA0GCSqGSIb3DQEBCwUAMFUxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDQxMTE0MzY1 NloXDTI1MDUxMzE0MzY1NVowFzEVMBMGA1UEAwwMKi5uZXh0ZXAuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ345iJ++fmiDbQIE+Xxsf7K3aOP djZS3ZVQ7JGXiGmqvmgnpcI75rpBy1gwyBz1HyEPsPA4hhdKtdFLhEpdf4Bk7Wyo PbamdNZYkHtQPiw/VkgXzzRj9gsZeEJ+ZORpBFw6pfGTlQVRbKaem4osxE5CFSro G4VhDHGFReYvvVNeGAsEZwbsEOsfMy0i+iN+erHor+Hy9sdwXyfCojIg7bg7nkzT y+8wejbhZfv7CrXuVhlJ03MOMHufsdInnbcYpAEyAKG5atOCLR/GOmKUsv503FB9 ZG0aR+5zffG1bpgtjYUcdDN84Cf01plOrfNp94AxKeIArXL66qv3/50UWQIDAQAB o4IDZTCCA2EwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgZkGCCsGAQUF BwEBBIGMMIGJMEkGCCsGAQUFBzAChj1odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24u Y29tL2NhY2VydC9nc2djY3I2YWxwaGFzc2xjYTIwMjMuY3J0MDwGCCsGAQUFBzAB hjBodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc2djY3I2YWxwaGFzc2xjYTIw MjMwVwYDVR0gBFAwTjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUF BwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzBEBgNV HR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjZh bHBoYXNzbGNhMjAyMy5jcmwwIwYDVR0RBBwwGoIMKi5uZXh0ZXAuY29tggpuZXh0 ZXAuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAW gBS9BbfzipM8c8t5+g+FEqF3lhiRdDAdBgNVHQ4EFgQUkn550eh2zpyn8sCHt+4t 5Js5rQwwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AObSMWNAd4zBEEEG13G5 zsHSQPaWhIb7uocyHf0eN45QAAABjs2XJV0AAAQDAEgwRgIhAOqIUIWoBl6r/JWb 4dOoMMCdFFBteJgfFYK7K2/9GYlgAiEA76O0hA5hfC1l7bzRxlmNJgRIHH4/aJML 5CrE5jhOM9IAdwATSt8atZhCCXgMb+9MepGkFrcjSc5YV2rfrtqnwqvgIgAAAY7N lyWGAAAEAwBIMEYCIQCIBMhOl4nKy6BayRtMPxEtMP9BXKH4iTFqhMC0PatS1gIh AMiDKKtELPlzQxq9qpzzv08Zhlv31QMHKXDpeVkUQaZfAHYATnWjJ1yaEMM4W2zU 3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGOzZcmawAABAMARzBFAiBLQmiD0lqRj19/ OyFPdZEK0Lb12avu/hpm9AmaW5UWogIhAOf3oK0hkvo2sr5remF5SkKSS1X2jCpk qy+eWpRO/OiQMA0GCSqGSIb3DQEBCwUAA4IBAQAY3ftDaXg6sIwPuVZJYxVwr1yc imIQ7t1uH89juoX+bUwJQQ3VMHFz2MWN2iGxYdKtyPbwZne0vuYryBdWlxYjOfVr U+4l8NMlgFh4zybJdfscox+r6Pj8sqLK6XklwiwsViScVGMwTjfQU2hgrH5q9psK /k0l+JSY/GWmIyXonRReC92X5s776RZwkj9EYSLaGEDM454RUy3qJiAiouONRG/E Yev3OBZpbegzl1FUxM8JKEgLrfvdMYr834QPv0gp+G/WWnTWvBlSsf21v0THiG1y FM5I52prLBsMiT4FOF9308kYbgOSCA9RPqX6QcnrqbTvmTEAelyjKoapcYmd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ345iJ++fmiDbQIE+Xx sf7K3aOPdjZS3ZVQ7JGXiGmqvmgnpcI75rpBy1gwyBz1HyEPsPA4hhdKtdFLhEpd f4Bk7WyoPbamdNZYkHtQPiw/VkgXzzRj9gsZeEJ+ZORpBFw6pfGTlQVRbKaem4os xE5CFSroG4VhDHGFReYvvVNeGAsEZwbsEOsfMy0i+iN+erHor+Hy9sdwXyfCojIg 7bg7nkzTy+8wejbhZfv7CrXuVhlJ03MOMHufsdInnbcYpAEyAKG5atOCLR/GOmKU sv503FB9ZG0aR+5zffG1bpgtjYUcdDN84Cf01plOrfNp94AxKeIArXL66qv3/50U WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 32126908010107209602093162610 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 14:36:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 14:36:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nextep.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25830513238596317732873080266939035121203214232009208507630964766024822748605435629051323936304104336160878681698724470707672791013324554953912042871227531188442638370624205980933004788544081005397806287685256483187101467254238895213150178447486981711141451542230457358961814405352433456024629047263952950947612577830419569459345676374891558510603127246892209996307860879618579479261803309686774677932710382732753995501096258595670925427149928004849689760885834828962222131495510455778611907693119624470989939987447709461816533036245954685473111626351090518587134375544151425321243019441332556518486967676313639130201 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextep.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextep.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 927e79d1e876ce9ca7f2c087b7ee2de49b39ad0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018ecd97255d0000040300483046022100ea885085a8065eabfc959be1d3a830c09d14506d78981f1582bb2b6ffd198960022100efa3b4840e617c2d65edbcd1c6598d2604481c7e3f68930be42ac4e6384e33d2007700134adf1ab5984209780c6fef4c7a91a416b72349ce58576adfaedaa7c2abe0220000018ecd97258600000403004830460221008804c84e9789cacba05ac91b4c3f112d30ff415ca1f889316a84c0b43dab52d6022100c88328ab442cf973431abdaa9cf3bf4f19865bf7d503072970e979591441a65f0076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018ecd97266b000004030047304502204b426883d25a918f5f7f3b214f75910ad0b6f5d9abeefe1a66f4099a5b9516a2022100e7f7a0ad2192fa36b2be6b7a61794a42924b55f68c2a64ab2f9e5a944efce890 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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