*.eos-hainan-1.cmecloud.cn

- 中移（苏州）软件技术有限公司 -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 5b:11:cd:45:b0:ea:4b:fc:8c:b3:a6:b8:a3:47:eb:84 was issued on by UniTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

中移（苏州）软件技术有限公司

Organization: 中移（苏州）软件技术有限公司
State / Province: 江苏省
Locality: 苏州市
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:11:cd:45:b0:ea:4b:fc:8c:b3:a6:b8:a3:47:eb:84
Serial Number (int): 121052180078487007787158571682879761284
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 65:fb:88:b2:d8:80:0c:11:14:85:3d:9e:db:4c:12:3c:20:8f:6b:a3
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): 5a:5d:83:cd:04:c6:0d:7e:be:fa:8e:db:8c:85:96:3a:63:0f:8c:27
Fingerprint (sha256): 67:43:af:26:3e:66:b2:55:37:04:07:22:db:13:79:a3:72:18:9e:af:4a:87:19:9e:c3:c0:4d:21:cb:2c:6f:55

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate *.eos-hainan-1.cmecloud.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eos-hainan-1.cmecloud.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eos-hainan-1.cmecloud.cn
eos-hainan-1.cmecloud.cn
*.eos-hainan-1-internal.cmecloud.cn
eos-hainan-1-internal.cmecloud.cn

Other certificates including the domain name cmecloud.cn

(limited to 100 certificates)
*.eos.xian-4.cmecloud.cn
*.eos.nanning-2.cmecloud.cn
*.eos.hangzhou-zs-1.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ningxia-1.cmecloud.cn
*.eos.huhehaote-11.cmecloud.cn
smp.ecso.hnzkh-1.cmecloud.cn
console.ecso.jsha-1.cmecloud.cn
*.eos.ecso.jscz-1.cmecloud.cn
*.cidc-rp-2159.xjaksxczwwwq1.joint.cmecloud.cn
*.eos.guiyang-5.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
console.ecs.hnzkh-1.cmecloud.cn
*.ahmashcso1.joint.cmecloud.cn
*.obs.cqdjmdyhlwq1.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.cmecloud.cn
console-beijing-1.cmecloud.cn
cidc-rp-13.joint.cmecloud.cn
*.eos.ecs.hnzkh-1.cmecloud.cn
*.eos.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.sdly-1.cmecloud.cn
*.eos.ecso.jxnc-1-internal.cmecloud.cn
*.eos.anhui-3.cmecloud.cn
*.ecis.zs-guian-1.cmecloud.cn
*.smp.ecs.jswx-1.cmecloud.cn
*.eos.ecs.jswx-1.cmecloud.cn
*.obs.cqyczwwwq1.joint.cmecloud.cn
*.eos-tianjin-1.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.eos-xinjiang-1.cmecloud.cn
*.eos.chongqing-4.cmecloud.cn
*.cidc-rp-2121.fjptmzzlzhcso1.joint.cmecloud.cn
*.obs.cidc-rp-2005.joint.cmecloud.cn
*.eos-guiyang-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.tjbhylyhcso2.joint.cmecloud.cn
*.jsycdthlwq1.joint.cmecloud.cn
*.xjbzzwwwq1.joint.cmecloud.cn
*.eos-huhehaote-6.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
*.obs.tjshnwqhcso2.joint.cmecloud.cn
*.obs.cidc-rp-11.joint.cmecloud.cn
smp.ecs.jswx-1.cmecloud.cn
*.ecis.zs-nanjing-1.cmecloud.cn
*.ecis.huabei-3.cmecloud.cn
*.eos-ningbo-3.cmecloud.cn
smp.ecs.hnzkh-1.cmecloud.cn
*.smp.ecso.jsnj2-1.cmecloud.cn
*.obs.jsycdthlwq1.joint.cmecloud.cn
*.eos.nanjing-zs-1.cmecloud.cn
*.eos.chongqing-4-internal.cmecloud.cn
*.ecis.zs-qingdao-1.cmecloud.cn
*.eos.ecs.hnld-1-internal.cmecloud.cn
*.eos-chengdu-6.cmecloud.cn
*.eos-guiyang-4.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.eos.ecs.hnzkz-1.cmecloud.cn
*.ecis.zs-shanghai-1.cmecloud.cn
console.ecso.jsnj-3.cmecloud.cn
*.eos.hainan-hw-1.cmecloud.cn
*.eos-guangxi-1.cmecloud.cn
*.lygrmxchcso1.joint.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.cidc-rp-2140.jsycdthlwq1.joint.cmecloud.cn
*.ecis.zs-beijing-1.cmecloud.cn
*.obs-website.cidc-rp-11.joint.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.eos.ecs.hbxy-1.cmecloud.cn
portal.zjdx.cmecloud.cn
*.obs.cqychlwq1.joint.cmecloud.cn
*.eos-huanan-1.cmecloud.cn
dingdong.cmecloud.cn
*.eos-hubei-1.cmecloud.cn
*.cidc-rp-2000.joint.cmecloud.cn
*.obs.cidc-rp-2000.joint.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.ecis.zs-guangzhou-1.cmecloud.cn
*.obs.zjjhhyyhcso1.joint.cmecloud.cn
*.obs.fjptmzzlzhcso1.joint.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ecs.xjklmy-1-internal.cmecloud.cn
*.secpool.ecs.hnld-1.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.jsntzwwwq.joint.cmecloud.cn
*.eos-yunnan-2.cmecloud.cn
*.obs.tjbhylyhcso2.joint.cmecloud.cn
*.eos.guiyang-zs-1.cmecloud.cn
*.obs.gdgznshcso1.joint.cmecloud.cn
*.obs.cqbshlwq1.joint.cmecloud.cn
*.eos-jilin-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.eos-anhui-1.cmecloud.cn
*.ecis.zs-hangzhou-1.cmecloud.cn
console.ecso.sxya-1.cmecloud.cn
*.cidc-rp-2139.cqcshlwq1.joint.cmecloud.cn
*.eos-beijing-4.cmecloud.cn

Certificate

The complete raw certificate details for *.eos-hainan-1.cmecloud.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIQWxHNRbDqS/yMs6a4o0frhDANBgkqhkiG9w0BAQsFADBA
MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxHjAcBgNVBAMMFVNIRUNB
IE9WIFNlcnZlciBDQSBHNTAeFw0yMzEyMTQwMzAwMzJaFw0yNTAxMTQxNTU5NTla
MIGPMQswCQYDVQQGEwJDTjESMBAGA1UECAwJ5rGf6IuP55yBMRIwEAYDVQQHDAno
i4/lt57luIIxMzAxBgNVBAoMKuS4reenu++8iOiLj+W3nu+8iei9r+S7tuaKgOac
r+aciemZkOWFrOWPuDEjMCEGA1UEAwwaKi5lb3MtaGFpbmFuLTEuY21lY2xvdWQu
Y24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mxcFPgDvkiznMgiP
KrZzHHBSb20DACpLUtx9sdDv4HG4wUPo470nm3a4K2Q9ZBAJxubQA5P75pLr4i9u
k/Dxh4s7+FDnJNHr5D3CREHbYFlw3YfjHWBpvzZ3xDImXUYUrIjGSksUczDwp/MR
X4qvoI0NhiBF5PWqPtBmboNH57MGbud+CB6wSI5Bz49Tv0TBKQ1pQQ2uJoM9S7P+
+LGIJAbOqVM9bPB6xc9ehTD2ZqlhoCLF1VXwAbPFU5YDoW20710ABuThUH6PzgDF
HORXSJYqdmIsNwhw+di0Mrbc/U9K8cDPBTYVgO+1Ze66Uky4QQn9aNxSsCh8P3aa
lnptAgMBAAGjggH2MIIB8jB3BggrBgEFBQcBAQRrMGkwMAYIKwYBBQUHMAGGJGh0
dHA6Ly9vY3NwLmdsb2JhbC5zaGVjYS5jb20vb3ZzY2FnNTA1BggrBgEFBQcwAoYp
aHR0cDovL2NlcnRzLmdsb2JhbC5zaGVjYS5jb20vb3ZzY2FnNS5jZXIwHwYDVR0j
BBgwFoAUA3mjjVJf1OmIkh9DWFQlAvSHi34wgYgGA1UdEQSBgDB+ghoqLmVvcy1o
YWluYW4tMS5jbWVjbG91ZC5jboIYZW9zLWhhaW5hbi0xLmNtZWNsb3VkLmNugiMq
LmVvcy1oYWluYW4tMS1pbnRlcm5hbC5jbWVjbG91ZC5jboIhZW9zLWhhaW5hbi0x
LWludGVybmFsLmNtZWNsb3VkLmNuMB0GA1UdDgQWBBRl+4iy2IAMERSFPZ7bTBI8
II9rozAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAgBgNVHSAEGTAXMAsG
CSqBHIbvOgEBAjAIBgZngQwBAgIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwOAYDVR0f
BDEwLzAtoCugKYYnaHR0cDovL2NybC5nbG9iYWwuc2hlY2EuY29tL292c2NhZzUu
Y3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsF
AAOCAQEAh7PBcZwN6J4FOEOz+2x9jfiQmojUHzkqP3zOicbBiJX2dO+T8nQz3ENo
lFgGL1t+NSV3vUAhGThr3YIvCwzBycgM9teqTmomzyWKfx5zxbZDp05yMzhCSkYq
IaYJVq2MjJesykXmfgZmWZexDtfXrWpRMG4KI9C82oyhaZuT9JdJRCBLihLvzMmj
jip0B03xWqxDkGC90USY8TaJltc2OTqBHqD+pnjZ+cVUN0kY0GOPIfR78f7CKckO
hHtXoDr+pfFI+knD1WgvMCm9IBhoF/z/la52HQMITMuXxqDBkxq58mzx7SGJZi42
Op4AdLv4EZ+KI0uYbp9UPCoOq3iyKA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJsXBT4A75Is5zIIjyq2
cxxwUm9tAwAqS1LcfbHQ7+BxuMFD6OO9J5t2uCtkPWQQCcbm0AOT++aS6+IvbpPw
8YeLO/hQ5yTR6+Q9wkRB22BZcN2H4x1gab82d8QyJl1GFKyIxkpLFHMw8KfzEV+K
r6CNDYYgReT1qj7QZm6DR+ezBm7nfggesEiOQc+PU79EwSkNaUENriaDPUuz/vix
iCQGzqlTPWzwesXPXoUw9mapYaAixdVV8AGzxVOWA6FttO9dAAbk4VB+j84AxRzk
V0iWKnZiLDcIcPnYtDK23P1PSvHAzwU2FYDvtWXuulJMuEEJ/WjcUrAofD92mpZ6
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121052180078487007787158571682879761284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 03:00:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '江苏省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '苏州市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中移（苏州）软件技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eos-hainan-1.cmecloud.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22799372585649180368501845762367635657048156883296978482037708377663026956823238325027505811199068786003299186098807539018334278258917218691064423300158609263205150252131761479066540807393597432891054575746660315602120261176582097897495811434314209612742001354852740545874452496700092135308559736908532744059242176103185414902311958731584920101901380375237374668008398649410559238811298935298742038504018868691476940315257751006639069705893971429652535812274885614684439905184039022684286359565128363488981975667559011966874216525165809007853750575175394041042288994228816311594946631737699958771662736788514412067437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-hainan-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-hainan-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-hainan-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-hainan-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65fb88b2d8800c1114853d9edb4c123c208f6ba3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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