mail.ikano.nu

- Ikano Bank AB (Publ) -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 61:ef:15:4e:52:c3:6d:2a:5f:0e:1a:d8 was issued on by GlobalSign nv-sa.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Ikano Bank AB (Publ)

Organization: Ikano Bank AB (Publ)
Organization unit: IT
State / Province: Skane
Locality: Malmo
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:ef:15:4e:52:c3:6d:2a:5f:0e:1a:d8
Serial Number (int): 30309079838064276411272534744
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 02:7a:20:18:e6:dc:89:30:ec:b7:54:c4:2e:0e:74:11:f9:05:77:90
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ae:17:c6:39:e7:11:4f:aa:59:39:95:47:15:29:9f:0b:23:44:d6:9b
Fingerprint (sha256): 62:32:09:fe:d6:a1:08:1a:d6:cd:30:07:46:a1:9a:db:b0:a4:95:fe:3c:38:bb:bc:95:8e:ec:83:19:64:3d:90

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate mail.ikano.nu

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ikano.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.ikano.nu
autodiscover.ikano.de
autodiscover.ikano.dk
autodiscover.ikano.fi
autodiscover.ikano.net
autodiscover.ikano.no
autodiscover.ikano.pl
autodiscover.ikano.se
cas.ikano.nu
legacy.ikano.nu
autodiscover.ikano.nu

Other certificates including the domain name ikano.nu

(limited to 100 certificates)
apianalytics.ikano.nu
selfservice.ikano.dk
mail.ikano.nu
Identitynow.ikano.nu
citrix.ikano.nu
view.ikano.nu
api.ikano.nu
esb.ikano.nu
citrix.ikano.nu
selfservice.ikano.dk
view.ikano.nu
uat.newlook.ikano.nu
apipte.ikano.nu
citrix.ikano.nu
ecore.ikano.nu
ecore.ikano.nu
mail1.ikano.nu
Identitynow.ikano.nu
pte.ikano.merchantportal.ikano.nu
mailguard1.ikano.nu
esb.ikano.nu
pvmdc1linise002.ikano.nu
UAT.SVN.Ikano.Nu
esb.ikano.nu
hopex.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
citrix.ikano.nu
apiuat.ikano.nu
dev01.apitest.ikano.nu
Identitynow-sso.ikano.nu
ikano.merchantportal.ikano.nu
hopex.ikano.nu
mail.ikano.nu
mail1.ikano.nu
CHAT.IKANO.NU
view.ikano.nu
crm.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
crm.ikano.nu
uat.hopex.ikano.nu
maileuq.ikano.nu
mail.ikano.nu
sip.ikano.nu
kampanj.ikano.nu
access.ikano.nu
adfs.ikano.nu
view.ikano.nu
maileuq.ikano.nu
api.ikano.nu
mail.ikano.nu
esb.ikano.nu
tm.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
sbm.ikano.nu
adfs.ikano.nu
adfs.ikano.nu
uat.crm.ikano.nu
citrix.ikano.nu
pte.onlineshop.ikano.nu
vdi.ikano.nu
mail.ikano.nu
LyncWebDC.ikano.nu
maconomy.ikano.nu
citrix.ikano.nu
identitynow.ikano.nu
uat.identityiq.ikano.nu
sip.ikano.nu
apipte.ikano.nu
uat.newlook.ikano.nu
adfs.ikano.nu
access.ikano.nu
sbm.ikano.nu
apiuat.ikano.nu
api.ikano.nu
pte.onlineshop.ikano.nu
snowexternal.ikano.nu
vcse.ikano.nu
vdi.ikano.nu
uat.crm.ikano.nu
dev01.apitest.ikano.nu
oobdc1.ikano.nu
maileuq.ikano.nu
sts.ikano.nu
ise.ikano.nu
apipte.ikano.nu
sbm.ikano.nu
LyncWebDC.ikano.nu
nlease2.ikano.nu
maileuq.ikano.nu
apimanagement.ikano.nu
apiuat.ikano.nu
apimanagement.ikano.nu
identityiq.ikano.nu
citrix.ikano.nu
bafnet.ikano.nu
pte.ikea.customerportal.ikano.nu
invoice.edit.ikano.nu

Certificate

The complete raw certificate details for mail.ikano.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAup72pjtlXtpeWQObRHtK
1dz1mdU50Be0Si+101c21NN/CzIEB/qwqPf5dHqLgqGFVmLfFJzQhtdZHHoFBGPC
IjGzClP65TzBPxCE5DUp1Xe48qyq7Q3accMUXFFricf9eyE2C847NUdfquWEaBXs
W/KFuPqHnGa43IEbFNEjci6YFHBaZWElteSizU4L1RbCxmMs9WBiw37wnz7sjk67
BmJIcxVJ/0NBdIr1gF1evIzh/tKz4NsMMuGHcjvUcwCeOhpr9Nt06iMP640hgO+1
PdQeDRxzrIM1v+ceepsuT+xjHByDZlDl3dM421hdTBuRtXV9316xlJr8PgUnuy1h
DfwNvWE7VawN6hn4OOAMku2Ca5jBYCO06kx0nRQPRXMrSKJqMnow8WAD6qIO5uRC
Gctdbgz7ktA0VjVePA9GuSdH5mIFY8Vf8EQ1Y9dl3Tir/V57RVys3BrYpFSlGMc7
g3wW5ydTNCdZgcdicLNz0eyPcR+Qm77Uy2AKrMjCdv8tEciLvBCSIF1rIZ0BLK9p
GFSLc/ODS0RSO+roRbA7PXBr+ObllwMAUJtWmzQEmbFfxKUNK+CmTquJi0HYzEF/
2P3qO76hHxBkwNxfKbx/6ixM1IVjIHtieAlRpOVzZs70ND7tumQENkVt/KKtp6G8
iqBq+39RXh7bwgKZOHliAY8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30309079838064276411272534744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-18 15:16:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 15:16:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Malmo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ikano.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761347056002262974066558347311278472707316492525118865517067357236891803466353895715045024106589226055973354530838918436338438862886356392132475982124340376367719630493439307001212637210110288350411943459034916599017613228224780664309699903501299784114820735399187087882146042262756333636519167855305170295403727970319185514381783293199024175400780361630227759981005710858572965712545111231428673098787588290850603162425553425700929640573564514131387917031707072371019361432641015940162904945056654776056580878811950710299633236378787967477374799887878664638682656895774007107951165156999001448974661485393094727598348467720418193704329237415683224561393744241658032772411538352381133358380432669430553558186766655939965243733041366198220653054368311136348663306427148762207765025411114361991284587163696737810673287662847753040441612736355430207544191744543471084743558544615729403916331152669369393486686079087372406302662086570069968274441079154254900185076221765831220355984793719531984032772846719857050188277077136566461485522677171391258977360490782867435307297820249450305854210586154424288268704483145222902645772106235204344277926344750149996132002490546458535798515971510307979703318140371582317944393037305038636381766031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ikano.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.ikano.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ikano.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ikano.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							027a2018e6dc8930ecb754c42e0e7411f9057790
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174a1c96f3900000403004730450221008158ccb491ea8b79488c2585f4d5bac8ad8660ee14e1d4021e948e56af0ce0c0022050b765d8fa02cab09514d550c4ae9350fc7cd3f2f06c7b31045a3367c5572ec5007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174a1c96c8e0000040300483046022100d85f0772fe8d3df857ea8cb804cfeafc55676b20dd9afa0a360c11a18bb9fd02022100947c7d49c2577904bb80f0390297be9614f55737ae9603db80b208ea3c90736f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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