sso.three.co.uk

- Hutchison 3G UK Ltd -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:25:0a:bc was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Hutchison 3G UK Ltd

Organization: Hutchison 3G UK Ltd
State / Province: BE
Locality: Maidenhead
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:25:0a:bc
Serial Number (int): 1277495996
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 30:0b:b8:88:e2:fd:d1:3b:62:bc:11:36:4e:9a:09:79:57:f8:30:1f
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 4c:0d:51:f3:8d:7c:27:6f:96:b1:83:30:33:71:dd:da:01:5e:64:d0
Fingerprint (sha256): 5c:e8:2a:73:b8:11:c6:68:e8:e6:4a:f1:88:af:ae:91:94:8a:f5:3b:5f:4a:38:1f:c4:c6:c8:dd:e3:e5:1b:d2

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate sso.three.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso.three.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso.three.co.uk

Other certificates including the domain name three.co.uk

(limited to 100 certificates)
f.chat3.three.co.uk
mva.testbed.three.co.uk
smetrics.three.co.uk
owa.three.co.uk

hem-webservices.three.co.uk
www.businesstools.three.co.uk
users-pdt.three.co.uk
warehouse.three.co.uk
jobs.three.co.uk
secure06.lithium.com
secure07.stage.lithium.com
*.three.co.uk
connect.three.co.uk
three.co.uk
2nddomain.three.co.uk

sslcertificate2.queue-it.net
www.three.co.uk

preprod-store.three.co.uk
sslcertificate2.queue-it.net

test-staging-active.three.co.uk
mail.three.co.uk
three.co.uk
accessories.three.co.uk
secure06.lithium.com
secure06.lithium.com
locator.three.co.uk
smetrics.three.co.uk
obsp03clust-dfe-vip.it.three.co.uk
mconsole.three.co.uk
three.co.uk
www.three.co.uk
blog1.three.co.uk
smobile.three.co.uk
2nddomain.three.co.uk
man-webservices.three.co.uk
secure07.stage.lithium.com
intranet.three.co.uk
secure06.lithium.com
b2c-mobile-buat.testbed.three.co.uk
mifioffers.three.co.uk
hem-webservices.three.co.uk
profile.three.co.uk
test-staging-active.three.co.uk
secure07.stage.lithium.com
repair.three.co.uk
reseller-test.three.co.uk
threerescue.three.co.uk


m.services.three.co.uk
staging-active.three.co.uk
sslcertificate2.queue-it.net
wholesale.three.co.uk
mail.three.co.uk
qc.three.co.uk
mail.three.co.uk
business.three.co.uk
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
misp.three.co.uk
secure06.lithium.com
fila.ingressorapido.com.br
sslcertificate2.queue-it.net
locator.three.co.uk
sghp.three.co.uk
smetrics.three.co.uk
sslcertificate2.queue-it.net
my3.three.co.uk

test-staging-active.three.co.uk
sslcertificate2.queue-it.net
intranet.three.co.uk
secure07.stage.lithium.com
auth.three.co.uk

intranet.three.co.uk
accessories.three.co.uk

dl.threerescue.three.co.uk
three.co.uk
three.co.uk
sslcertificate2.queue-it.net
www.businesstools.three.co.uk
me.three.co.uk

threerescue.three.co.uk
access.three.co.uk
mstrprod.three.co.uk
secure06.lithium.com
sslcertificate2.queue-it.net
registration.three.co.uk
api-webservices.three.co.uk
sslcertificate2.queue-it.net
sso.three.co.uk
smetrics.three.co.uk

Certificate

The complete raw certificate details for sso.three.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIETCUKvDANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xNTA5MDkxMjQ2MjhaFw0xNjA5MzAw
NTIxMzFaMGcxCzAJBgNVBAYTAkdCMQswCQYDVQQIEwJCRTETMBEGA1UEBxMKTWFp
ZGVuaGVhZDEcMBoGA1UEChMTSHV0Y2hpc29uIDNHIFVLIEx0ZDEYMBYGA1UEAxMP
c3NvLnRocmVlLmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
og2pUS6o9fbtN0Cnoz66Y/93LtgyFG/ENlYA53UH+O5Rka7aLlNJ6Di+Le4VvzV0
vEG8iEd196KMyyjbTrppRXnKJbwabhhm4KQIiKKvWMo1jYJIHZa1dcQ8dtJVoMXY
ElxxoCxF8PSPE8cf4brw/B4wDHIclvTTom8hU7ktK+WIKt3Zta+V/MTxTzr46R/W
GDsHgD5Xojsh6NStNvOSiXbqhWXGu62LEJBJhrgVDXgQkmzJkmt/Q4eVEZyUr4PU
nQ7fVAnRMFLrdAaZpIklrkoGPinFig3+zkMlY4EPaM+TygUh+FiOM7Kemx3pRwNI
cvCjl1KnJEULpHj00KnPzQIDAQABo4IBdDCCAXAwCwYDVR0PBAQDAgWgMBMGA1Ud
JQQMMAoGCCsGAQUFBwMBMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50
cnVzdC5uZXQvbGV2ZWwxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMCMGCCsGAQUFBzAB
hhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAvBggrBgEFBQcwAoYjaHR0cDovL2Fp
YS5lbnRydXN0Lm5ldC8yMDQ4LWwxYy5jZXIwSgYDVR0gBEMwQTA1BgkqhkiG9n0H
SwIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYG
Z4EMAQICMBoGA1UdEQQTMBGCD3Nzby50aHJlZS5jby51azAfBgNVHSMEGDAWgBQe
8auJBvhJDwEzd+4Ueu4ZfJMoTTAdBgNVHQ4EFgQUMAu4iOL90TtivBE2TpoJeVf4
MB8wCQYDVR0TBAIwADANBgkqhkiG9w0BAQUFAAOCAQEAHdk/N9R9qMoaHCLmAcm0
HrYyp3D50Z1DREGIa8eukFv3jqFkupZoS1MiwmIWIUp8PjP0h3aP2YiHC0F7SHAD
em9dVKEU24asdJDsya1wuK00yv+qaRsxqjtuS/n+/4LN+/ZCpIw3AT0Ues8iXVHb
BFojT/ScAYcSR873AXRL4lKyWsWgRDnFh6cGSYtTfjrjDsYxXO14Kd8bL5NJFeSz
CnR3bmdgEHMK804bqrEEAhnCYY5ECupTFerkaH1kO7rTn26V9+HD0eVn1xCUXjHJ
2rqvh7b79KYAAkbP3zuJuWqN1UT26TQBLUv8GZcTWAZb3x5KGetfwBKxJQdT8hAB
kA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog2pUS6o9fbtN0Cnoz66
Y/93LtgyFG/ENlYA53UH+O5Rka7aLlNJ6Di+Le4VvzV0vEG8iEd196KMyyjbTrpp
RXnKJbwabhhm4KQIiKKvWMo1jYJIHZa1dcQ8dtJVoMXYElxxoCxF8PSPE8cf4brw
/B4wDHIclvTTom8hU7ktK+WIKt3Zta+V/MTxTzr46R/WGDsHgD5Xojsh6NStNvOS
iXbqhWXGu62LEJBJhrgVDXgQkmzJkmt/Q4eVEZyUr4PUnQ7fVAnRMFLrdAaZpIkl
rkoGPinFig3+zkMlY4EPaM+TygUh+FiOM7Kemx3pRwNIcvCjl1KnJEULpHj00KnP
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277495996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-09 12:46:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-30 05:21:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maidenhead'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hutchison 3G UK Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.three.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20457342089452264678388182250482115067450795061214491451556667730018071476764146498573102320694257134995271238524413227086122317165356998357755272371549007347896521734147309271060002422990663844716579080326985234685177374282451042123560309261609964855913156982964527553445561359265195950776783489308382505210611940249542933337611823547154841498938537659140496600604286190933012500781818237651328035142983339614317519905757230491000843209223151810383265123268773571304692901011464922577448604197779496254637361558129636205509503687433218069502806931444103427432908487843558782084372397656331578113630651635685713891277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.three.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							300bb888e2fdd13b62bc11364e9a097957f8301f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001dd93f37d47da8ca1a1c22e601c9b41eb632a770f9d19d434441886bc7ae905bf78ea164ba96684b5322c26216214a7c3e33f487768fd988870b417b4870037a6f5d54a114db86ac7490ecc9ad70b8ad34caffaa691b31aa3b6e4bf9feff82cdfbf642a48c37013d147acf225d51db045a234ff49c01871247cef701744be252b25ac5a04439c587a706498b537e3ae30ec6315ced7829df1b2f934915e4b30a74776e676010730af34e1baab1040219c2618e440aea5315eae4687d643bbad39f6e95f7e1c3d1e567d710945e31c9dabaaf87b6fbf4a6000246cfdf3b89b96a8dd544f6e934012d4bfc19971358065bdf1e4a19eb5fc012b1250753f2100190