*.baoviet.com.vn

- BAOVIET HOLDINGS -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 62:c6:0d:73:bc:dc:6c:f9:a2:59:dd:27 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BAOVIET HOLDINGS

Organization: BAOVIET HOLDINGS
State / Province: Hanoi
Locality: Hanoi
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 62:c6:0d:73:bc:dc:6c:f9:a2:59:dd:27
Serial Number (int): 30568961800524231087039831335
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 34:aa:eb:36:75:d2:e8:5e:b1:e8:2d:7a:6a:7a:af:e9:35:bc:52:d6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): a6:ea:02:51:07:8f:f3:f2:37:43:da:6b:1e:f5:7f:8b:3b:fd:b6:04
Fingerprint (sha256): 5d:1f:6a:21:08:41:1a:57:84:e7:30:f5:db:6c:79:5d:12:e6:01:df:01:c9:c2:9e:6d:d3:b0:d7:36:ac:1d:5b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.baoviet.com.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.baoviet.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.baoviet.com.vn
baoviet.com.vn

Other certificates including the domain name baoviet.com.vn

(limited to 100 certificates)
*.vpn.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
ocr.baoviet.com.vn
*.baoviet.com.vn
covid19.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.vpn.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
sni.cloudflaressl.com
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn

Certificate

The complete raw certificate details for *.baoviet.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIMYsYNc7zcbPmiWd0nMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMjAyMjIwMzA3MDRaFw0y
MzAzMTkwNDE2MTZaMGMxCzAJBgNVBAYTAlZOMQ4wDAYDVQQIEwVIYW5vaTEOMAwG
A1UEBxMFSGFub2kxGTAXBgNVBAoTEEJBT1ZJRVQgSE9MRElOR1MxGTAXBgNVBAMM
ECouYmFvdmlldC5jb20udm4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDMCPp+LMVOawRxKe/vSqXqsUvY3i6utplRkKDenJOXCC/Aw/GvIHA2TYYoZKq
OU267xjDv+8VjGoWGHy6NKE2vonJUHWhsmZYCPx4gX9x2TDFg+wN/OUYPujo2KxQ
fypMVTYwhIPFqjql8lIfKZz7ZLnxwq04ARVZ1GixrpFHa2I4jSRSjjDWtCknPduG
oi3GBfGokeIgr24NsyhCjsU5hUL6J/lHWx+PzQQcGQ4S3GyjkIftg1qg5QFeQM8e
0pw9mzcq3SWjeI+zNXPzsc51uTyWZxch8N3HvHyi2s4VjV5k5JH9tu/EJkOV/UD4
q+7AojiPotpCbSZH9tTH3LyTAgMBAAGjggMVMIIDETAOBgNVHQ8BAf8EBAMCBaAw
gY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xv
YmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUF
BzABhitodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4
MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRME
AjAAMCsGA1UdEQQkMCKCECouYmFvdmlldC5jb20udm6CDmJhb3ZpZXQuY29tLnZu
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/y
zXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUNKrrNnXS6F6x6C16anqv6TW8UtYw
ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AOg+0No+9QY1MudXKLyJa8kD08vR
EWvs62nhd31tBr1uAAABfx9llxMAAAQDAEYwRAIgWsL/fkvroCUu2ANbVrUVMGcE
O0IGN1NNKdSdf+luOUkCIDuGb9OoEodnGr/EnWxiRlVv1Me/uTjCIy/ALh903t2M
AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF/H2WV8QAABAMA
RzBFAiEAhTPLrox2jPtct1MVxuDwo27YRVGBLgnL9MdnPraQXi8CIDqMLrQHPVo7
M2RdhjfUglS/Eox+zudatPoJkFeGSGL7AHYANc8ZG7+xbFe/D61MbULLu7YnICZR
6j/hKu+oA8M71kwAAAF/H2WW+gAABAMARzBFAiEAyMBjH8LpyAVIkZgnQcfmiYAm
gsGVvDgbZmQ/Dz78t9QCIGdCChE6J56fIBfhD0gWQuyfczx1wNSYQQ7XuqpMjjst
MA0GCSqGSIb3DQEBCwUAA4IBAQAEsYj65ebjnPSQIKamtzBe/S5J2K/kRXxnbZLa
jFJG+1pOcMsKsURi8Jw+evAcd6qwGsS6rqn57osnIBVmXcReJepInD2TDk4Qb2GA
OB2ys+vymFgRDBQjtVJbi2LRKtkB5IfNfAJ15tZ6GLOhnlLAuL2LhwewAe/jehAz
IHwTbtN8KwNMWdJW46PG6cvypz9JjdHRojydRJJeYovaG2JjlzTRZgjAq25DpXQV
rysXZsjDo45yBqY082WhDxa9W1N9Kl5i0uKmvUpo5IdCjYIp1fLB9chgEHoaQeW3
z1kEdmyCcy/6U9VGID9xg0PzC0HHMAIqSjMdTxA+rwo8QbRy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzAj6fizFTmsEcSnv70q
l6rFL2N4urraZUZCg3pyTlwgvwMPxryBwNk2GKGSqjlNuu8Yw7/vFYxqFhh8ujSh
Nr6JyVB1obJmWAj8eIF/cdkwxYPsDfzlGD7o6NisUH8qTFU2MISDxao6pfJSHymc
+2S58cKtOAEVWdRosa6RR2tiOI0kUo4w1rQpJz3bhqItxgXxqJHiIK9uDbMoQo7F
OYVC+if5R1sfj80EHBkOEtxso5CH7YNaoOUBXkDPHtKcPZs3Kt0lo3iPszVz87HO
dbk8lmcXIfDdx7x8otrOFY1eZOSR/bbvxCZDlf1A+KvuwKI4j6LaQm0mR/bUx9y8
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30568961800524231087039831335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-22 03:07:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 04:16:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BAOVIET HOLDINGS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.baoviet.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24640208329583441133130720956010738969961377314749451117976895400739029048733438507272848996837889101101817285033537548962110874976656161628083836641518098968184176319766645824205445043047963587139029315606185085253488424749810561087228896503347691702964717655112934157097895520157474458560962550167478624168775139190534586254827768118265802501705530284816969674931771375064595770748719128250681548163358948174939643884123193178509727110896924353361094467360404162491819920874779979407616960257797149681180983392876170998267332356110559763049646824964516930542331668456361302382929756441799305178832486494359288331411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baoviet.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baoviet.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34aaeb3675d2e85eb1e82d7a6a7aafe935bc52d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004b188fae5e6e39cf49020a6a6b7305efd2e49d8afe4457c676d92da8c5246fb5a4e70cb0ab14462f09c3e7af01c77aab01ac4baaea9f9ee8b272015665dc45e25ea489c3d930e4e106f6180381db2b3ebf29858110c1423b5525b8b62d12ad901e487cd7c0275e6d67a18b3a19e52c0b8bd8b8707b001efe37a1033207c136ed37c2b034c59d256e3a3c6e9cbf2a73f498dd1d1a23c9d44925e628bda1b62639734d16608c0ab6e43a57415af2b1766c8c3a38e7206a634f365a10f16bd5b537d2a5e62d2e2a6bd4a68e487428d8229d5f2c1f5c860107a1a41e5b7cf5904766c82732ffa53d546203f718343f30b41c730022a4a331d4f103eaf0a3c41b472