backupintelligence.ceejay.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4f:07:70:bb:af:2e:e2:40:6c:34:6b:30 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=backupintelligence.ceejay.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:07:70:bb:af:2e:e2:40:6c:34:6b:30
Serial Number (int): 24458310623834061589317970736
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b9:03:ed:47:48:cf:1c:15:7b:5b:fc:2f:a6:ce:d0:e4:7e:ff:64:5c
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): aa:ef:6a:84:9f:c6:2d:c4:b8:cf:d0:31:0b:f3:70:12:cd:56:dd:13
Fingerprint (sha256): 69:47:bb:13:6a:8b:8f:83:8d:e1:34:7e:cc:b0:9e:88:b7:fa:b4:94:44:b9:0d:ac:cb:40:a8:b1:d7:b2:0b:44

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate backupintelligence.ceejay.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for backupintelligence.ceejay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backupintelligence.ceejay.com

Other certificates including the domain name ceejay.com

(limited to 100 certificates)
status.ceejay.com
ssl386989.cloudflaressl.com
bi.ceejay.com
ssl386988.cloudflaressl.com
ssl386987.cloudflaressl.com
ssl386987.cloudflaressl.com
ceejay.com
bi.ceejay.com
support.smartshift-robotics.com
ceejay.com
ssl386989.cloudflaressl.com
support.for-sight.co.uk
connect.ceejay.com
ceejay.com
ceejay.com
bi.ceejay.com
ssl386987.cloudflaressl.com
messageintelligence.ceejay.com
support.for-sight.co.uk
bi.ceejay.com
bi.ceejay.com
connect.ceejay.com
ceejay.com
ssl386988.cloudflaressl.com
ssl386989.cloudflaressl.com
bi.ceejay.com
ssl386988.cloudflaressl.com
ceejay.com
ssl386989.cloudflaressl.com
ssl386987.cloudflaressl.com
ssl386989.cloudflaressl.com
bi.ceejay.com
ssl386989.cloudflaressl.com
ssl386988.cloudflaressl.com
ceejay.com
connect.ceejay.com
support.for-sight.co.uk
ceejay.com
ssl386988.cloudflaressl.com
bi.ceejay.com
ceejay.com
backupintelligence.ceejay.com
ssl386989.cloudflaressl.com
ceejay.com
ssl386988.cloudflaressl.com
ssl386989.cloudflaressl.com
backupintelligence.ceejay.com
ssl386989.cloudflaressl.com
ceejay.com
help.ceejay.com
ssl386987.cloudflaressl.com
bi.ceejay.com
help.ceejay.com
support.for-sight.co.uk
help.ceejay.com
ssl386987.cloudflaressl.com
ceejay.com
ssl386988.cloudflaressl.com
ssl386987.cloudflaressl.com
ceejay.com
help.ceejay.com
ssl386989.cloudflaressl.com
ssl386987.cloudflaressl.com
bi.ceejay.com
ssl386989.cloudflaressl.com
www.ceejay.com
messageintelligence.ceejay.com
status.ceejay.com
ssl386987.cloudflaressl.com
ceejay.com
ceejay.com
lab.ceejay.com
*.ceejay.com
bi.ceejay.com
ssl386987.cloudflaressl.com
ceejay.com
status.ceejay.com
support.smartshift-robotics.com
ssl386988.cloudflaressl.com
ceejay.com
ssl386988.cloudflaressl.com
ceejay.com
bi.ceejay.com
ceejay.com
ci.ceejay.com
ceejay.com
ice.ceejay.com
bi.ceejay.com
ceejay.com
ceejay.com
ceejay.com
bi.ceejay.com
ssl386988.cloudflaressl.com
bi.ceejay.com
help.ceejay.com
ceejay.com
ssl386988.cloudflaressl.com
help.ceejay.com
ssl386989.cloudflaressl.com
ssl386989.cloudflaressl.com

Certificate

The complete raw certificate details for backupintelligence.ceejay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXTCCBkWgAwIBAgIMTwdwu68u4kBsNGswMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE3MDEzMTE5NTI1NloXDTE4MDIw
MTE5NTI1NlowSzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMSYw
JAYDVQQDEx1iYWNrdXBpbnRlbGxpZ2VuY2UuY2VlamF5LmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAM+5S/GTQVFkFplFar23V6jksONNq77yBiQF
my3XwQtM/se5kO/W3FPNLPvbJJXCy5guM+SnIzDkw7thaVHBTfPKbwG6wE1qGT+c
uRXTx7gHF/ktA9g6ckgtxvIXbChpdct2FuZ4upO8vfGQLNIt/jYbMYfe1S4hFTPw
LvXnWFamrWm6MuNoTfWAKjYGPRhNfQDrqRpnehYpwsPWQFaftrHYPpRn0yUH9WQz
iYqStMyGF+fmBRN61Jlfkq+UeFt/eOs0TBlO/su8v1FlcEX/s7nfPjGcdsMNKyhc
61qcBeyRbSzk0fulBReTag+CTG6U5umqRRo57Pn9D8zqvqVHa3kCAwEAAaOCBD4w
ggQ6MA4GA1UdDwEB/wQEAwIFoDCBiQYIKwYBBQUHAQEEfTB7MEIGCCsGAQUFBzAC
hjZodHRwOi8vc2VjdXJlMi5hbHBoYXNzbC5jb20vY2FjZXJ0L2dzYWxwaGFzaGEy
ZzJyMS5jcnQwNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNv
bS9nc2FscGhhc2hhMmcyMFcGA1UdIARQME4wQgYKKwYBBAGgMgEKCjA0MDIGCCsG
AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAI
BgZngQwBAgEwCQYDVR0TBAIwADA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY3Js
Mi5hbHBoYXNzbC5jb20vZ3MvZ3NhbHBoYXNoYTJnMi5jcmwwKAYDVR0RBCEwH4Id
YmFja3VwaW50ZWxsaWdlbmNlLmNlZWpheS5jb20wHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMB0GA1UdDgQWBBS5A+1HSM8cFXtb/C+mztDkfv9kXDAfBgNV
HSMEGDAWgBT1zdU8CFD5ak86t5faVoPmadJo9zCCAm0GCisGAQQB1nkCBAIEggJd
BIICWQJXAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFZ9hZg
YQAABAMASDBGAiEAsvfsOcStHghHR9WJwsfTP1NKC7UyEcGdftXWgDticRwCIQCu
GQYztTHiOFr/9A7P5Jscb8Gb4rLplorBF5hFrZKklwB2ALvZ37wfinG1k5Qjl6qS
e0c4V5UKq1LoGpCWZDaOHtGFAAABWfYWYRcAAAQDAEcwRQIhANTe8DL+k2xhlxhw
irv7zQR/4V7LdQIURbJdScExq+iHAiAwwo57BgSh8VqzLrnz0aG8vMMl5Qdr92jZ
Mygp1osP8QB1AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABWfYW
YOkAAAQDAEYwRAIgW+qBhNvWq9CybkFBhX+mgfS0KLPoOEIt90O5rJA5LhkCICDj
1wWAFUWHiv+GNY7yRur3DUTWhZ/patvxhM0kQNFCAHYApLkJkLQYWBSHuxOizGdw
Cjw1mAT5G9+443fNDsgN3BAAAAFZ9hZgWQAABAMARzBFAiEA/LLsr8EWsc4r3ExF
pckRKOe7h5c+eo1bG2EBapfEl/0CIEgo+jIxFdXVj3/GCy4KahWXw1dvrT16wV93
lO1som9UAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFZ9hZj
TAAABAMARjBEAiACR+fhPRaGv1dnWTeJo8q6MW+d2hltkpOihIM7yIoGdwIgVL6J
nm6nkD71uHFuTbzMip0IUMIO+0yOg9vhcYddLQEwDQYJKoZIhvcNAQELBQADggEB
AHOj7BjP6J+3z4H9pUfjO0gKnzjYEHj1EGbyz6cs0YqUh14m1DeQz7NP8skDdudz
ym4w8AAGRRFNt570yF71uncLyJhKpn/V1nfMxbDFHvroMbMK1pfKTwDRq3vVkaPP
DB0hPb9BZxygr/PamAzlLbtSU9kcOJ8/I37MfwwdCNv/dHG0dgYpeLN3QMMiWeLk
Tj9otsHs+PU5CaMIMuFVu+Yb1Er3KrI5zoCzKZ3n/VjjayTnPb2VfI4C8zXV8oCZ
h3BxyeW9i8GtQPkX6lPIooGnQ7mzBqToKav/JLr5fdmQd9/calaM6ET7e2laUQhK
XDdWQDHhZ6Yzv5//eocgGCg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7lL8ZNBUWQWmUVqvbdX
qOSw402rvvIGJAWbLdfBC0z+x7mQ79bcU80s+9sklcLLmC4z5KcjMOTDu2FpUcFN
88pvAbrATWoZP5y5FdPHuAcX+S0D2DpySC3G8hdsKGl1y3YW5ni6k7y98ZAs0i3+
Nhsxh97VLiEVM/Au9edYVqataboy42hN9YAqNgY9GE19AOupGmd6FinCw9ZAVp+2
sdg+lGfTJQf1ZDOJipK0zIYX5+YFE3rUmV+Sr5R4W3946zRMGU7+y7y/UWVwRf+z
ud8+MZx2ww0rKFzrWpwF7JFtLOTR+6UFF5NqD4JMbpTm6apFGjns+f0PzOq+pUdr
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24458310623834061589317970736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-31 19:52:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 19:52:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'backupintelligence.ceejay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26222702314028266459704573855557410887958358179185670019516983785296166900168728266475619570647129494154432479832496534560564414320596990966122225755647949286256348180380875775652523730764445176492253130557847609743795418399405750187217603848510131247750847318262556006783472795415112331321407949912892086439584950179475715503264912778763767599610762181212240756538866384557665648113079188462602976180739828738371863327185042456091146151179626149452274097089923752365824081876354868844974088024021720917770775421245297393590900562860435018948838687064772866387836083320198237256811764870213146011417603991192300120953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backupintelligence.ceejay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b903ed4748cf1c157b5bfc2fa6ced0e47eff645c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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