epd-test.thurmed.ch
- thurmed AG -
Issued by SwissSign RSA TLS OV ICA 2022 - 1
About this certificate
This digital certificate with serial number 57:e6:2b:2f:ec:cd:75:84:23:3d:3b:f1:f5:f5:06:44:f7:2f:df:db was issued on by SwissSign AG.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
thurmed AG
Organization:
thurmed AG
State / Province:
TG
Locality: Frauenfeld
Country: CH
Locality: Frauenfeld
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 57:e6:2b:2f:ec:cd:75:84:23:3d:3b:f1:f5:f5:06:44:f7:2f:df:dbSerial Number (int): 501815130593667004277737187876652430614957383643
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 9e:c4:77:73:d3:c5:38:e9:00:df:e8:a5:25:9e:c9:e3:54:3b:c8:69
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6
Fingerprint (sha1): a2:06:cc:bc:31:c1:82:d4:57:ad:ae:d3:97:41:af:b3:16:c7:14:42
Fingerprint (sha256): 6a:7b:d0:75:b2:bd:28:63:84:15:09:e4:72:27:57:b6:36:fa:3f:5d:8f:97:e8:f3:63:b9:c5:f0:fa:12:54:a8
Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34
Check the revocation status for certificate epd-test.thurmed.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for epd-test.thurmed.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
epd-test.thurmed.ch
Other certificates including the domain name thurmed.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for epd-test.thurmed.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHYzCCBUugAwIBAgIUV+YrL+zNdYQjPTvx9fUGRPcv39swDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTIzMDIyMzA5 MTQzNFoXDTI0MDIyMzA5MTQzNFowYjELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAlRH MRMwEQYDVQQHDApGcmF1ZW5mZWxkMRMwEQYDVQQKDAp0aHVybWVkIEFHMRwwGgYD VQQDExNlcGQtdGVzdC50aHVybWVkLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAg12j8ITQwHgTSxnip3haenX6yXyvigF6P20jTef+e2y0WpRDPOh7 OSteuJU7UjP9M6t6kDoNE6rl6kwKQtPSoPekCwNU5y011X4FcrilaM7aSsTwWu1D FWwC0tawOHzMVaBqWNa0aCiOfzZew9LOO1XoyFZsqxb+gwTbTjNSSQveKzhvr1zF g0RpgD7C19S3HesS8QFmd57/r/Bbu9m8H4CtcA/ZMOnKwgCcI1t1AF68CR/NFJ+r +YDt95F/C5tL4DM99bvTk8hILuRdEB/dVHJ/1LfCwk2WPJ8rmzXZYgXNPqTV5CQB 4bL7UemTlA2IgxmETq3BmynnYdr9ljemhwNQ8FGRrB3QM20i2y+V3XQefhQwRbIg k0lsv1Y/Nxj+pqOmxdMcX8K065a0jMPDa02Ubqaw3eIO6SmM3947d2/g9DT3tywq +IuEWzXciAi6/CpdgM6zXLh2g7dme1yy5IFa8uHavDgHpwug5MIQVf2vWsbK2tGu ZdKObklJ1KvYnRzdz/0TPbt2STQcGy/oTJlDhDW+hRAyK7KgsHwLQxEdEYIBcn5z 0GULKJ+uH9qvXXVZNXFgfuSWG4sfkxCcRJxd+g8XpKIeGTiEzmdMcaA6Hus13BuK 0x5HoTn7jC5QdM8x+xs5iQktMUQKuyxJ7Jj6Cy8vZKfJKGMTUlTrJKsCAwEAAaOC AiEwggIdMIGyBggrBgEFBQcBAQSBpTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2Fp YS5zd2lzc3NpZ24uY2gvYWlyLTBmMmJmOWE1LWRkMzctNDhjOS1hODViLTEyYWNk Y2I4YmU0NTBSBggrBgEFBQcwAYZGaHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3Np Z24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNV HSAEaDBmMAgGBmeBDAECAjAIBgYEAI96AQcwUAYIYIV0AVkCAQIwRDBCBggrBgEF BQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWdu X0NQU19UTFMucGRmMFEGA1UdHwRKMEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3Nz aWduLmNoL2NkcC05NmI2MmY1YS02YjczLTRkYTQtODdmNy1jZTQwMDJjMWNkMzQw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAe BgNVHREEFzAVghNlcGQtdGVzdC50aHVybWVkLmNoMB0GA1UdDgQWBBSexHdz08U4 6QDf6KUlnsnjVDvIaTAfBgNVHSMEGDAWgBR8bwpvEw/ZjCRvJjTzXGtDbbcjtjAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAdmWMjbyjp0P+ lFLtc5VigRdWg5E4robirCUzgg6gmuY6DKwTAkucrG1oamhNXYkdAgrqL1iha6ua v5B2Ut0fjeGB9hPvTvliFPfaYbzKGj9kxaP4S66ePISGbQG26AuE/IEmwJ84DO5o WcALgTI+BczeW+mXHQFtwnfX3O3oocZcIkv4SjiCJFc65eX+WgUOB8009f+q6DUJ UIK55nTHukYx3jxr/vtl18yzzcDZuhbbQ0uH7l0R06v3y6wfP1UO4arwIXUhZKAG pV9TC+Pjf32JfJD1emE3LF15bwNpgeM7VEBoFI7oAnACwP2CfGfQ0GciZFkLidmX QWz8FbIj3PbWZnURpr8g6N+vEDz5uHsNdZtLYBR+pEowi8aEy/aCXVvwn5Flrd+z PmIx/J4X06nMlAQHNtZydM6dwu6Mv8n8EKQjhYnXfWDcFm7oyR6KXckf+7tOWTcq lIoAksTwi0C/Vj25tYoMwpk2ywNqy9NBmQ72BK5xjIgKcucn2KeXn3WByj22iV5e Mqc56Fdnb/I8rozawADiXBAVSFTNqraV3ZGxlzAgHKmbFlQmWpo2lEG/rKKHAwbK ZON9EM4FdG9GJQS76hl7q4OYzHtCTS+T4pmX5aMxmgdrfu7C8zRKbyQFiEkq5Zpp v1WR5of50l9MPVnW9FsskRdZ9RYonLg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAg12j8ITQwHgTSxnip3ha enX6yXyvigF6P20jTef+e2y0WpRDPOh7OSteuJU7UjP9M6t6kDoNE6rl6kwKQtPS oPekCwNU5y011X4FcrilaM7aSsTwWu1DFWwC0tawOHzMVaBqWNa0aCiOfzZew9LO O1XoyFZsqxb+gwTbTjNSSQveKzhvr1zFg0RpgD7C19S3HesS8QFmd57/r/Bbu9m8 H4CtcA/ZMOnKwgCcI1t1AF68CR/NFJ+r+YDt95F/C5tL4DM99bvTk8hILuRdEB/d VHJ/1LfCwk2WPJ8rmzXZYgXNPqTV5CQB4bL7UemTlA2IgxmETq3BmynnYdr9ljem hwNQ8FGRrB3QM20i2y+V3XQefhQwRbIgk0lsv1Y/Nxj+pqOmxdMcX8K065a0jMPD a02Ubqaw3eIO6SmM3947d2/g9DT3tywq+IuEWzXciAi6/CpdgM6zXLh2g7dme1yy 5IFa8uHavDgHpwug5MIQVf2vWsbK2tGuZdKObklJ1KvYnRzdz/0TPbt2STQcGy/o TJlDhDW+hRAyK7KgsHwLQxEdEYIBcn5z0GULKJ+uH9qvXXVZNXFgfuSWG4sfkxCc RJxd+g8XpKIeGTiEzmdMcaA6Hus13BuK0x5HoTn7jC5QdM8x+xs5iQktMUQKuyxJ 7Jj6Cy8vZKfJKGMTUlTrJKsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 501815130593667004277737187876652430614957383643 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 09:14:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 09:14:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frauenfeld' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'thurmed AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epd-test.thurmed.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 535925636412965767263842405110404479904156133781878228191766932682187053648797979838875197871253545840820328159588971184335105527043481093940765750875538318480863757195895095668337030388679411828491193797095739290783783906416030262820549958138194161029204404998397887300101887666613928908868357428581002116212228320494206161704929433251949790425921963617958832616950859981442592123721082971846477236559999134064008403624220754314017744135759753718819563151171554577831394953857479834541483296770029310356144608821784382541333320767260013813547332535246223235495606917396164160025820088155617231385678190551501350461556887234115463896322720047423343077956556888538113358932108438555640711527835849968191608105747678977136419469378403534809317020215173176268870254607940416006049757648059417433480255110142426535609357402209153052747145966913252629672547835149650365772603830501600345102094316382667190253424584975197703275709981398606393416239731801080764564241505531394403990377389990974109805187927987195482055887820791743593053661279539270262191324729057243645437936015393924627905936834310616628969828584850661880848172578705566179374681758284876519752220830663409518398609341632336691110752607195856003371240518347910088646927531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epd-test.thurmed.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9ec47773d3c538e900dfe8a5259ec9e3543bc869 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0076658c8dbca3a743fe9452ed739562811756839138ae86e2ac2533820ea09ae63a0cac13024b9cac6d686a684d5d891d020aea2f58a16bab9abf907652dd1f8de181f613ef4ef96214f7da61bcca1a3f64c5a3f84bae9e3c84866d01b6e80b84fc8126c09f380cee6859c00b81323e05ccde5be9971d016dc277d7dcede8a1c65c224bf84a388224573ae5e5fe5a050e07cd34f5ffaae835095082b9e674c7ba4631de3c6bfefb65d7ccb3cdc0d9ba16db434b87ee5d11d3abf7cbac1f3f550ee1aaf021752164a006a55f530be3e37f7d897c90f57a61372c5d796f036981e33b544068148ee8027002c0fd827c67d0d0672264590b89d997416cfc15b223dcf6d6667511a6bf20e8dfaf103cf9b87b0d759b4b60147ea44a308bc684cbf6825d5bf09f9165addfb33e6231fc9e17d3a9cc94040736d67274ce9dc2ee8cbfc9fc10a4238589d77d60dc166ee8c91e8a5dc91ffbbb4e59372a948a0092c4f08b40bf563db9b58a0cc29936cb036acbd341990ef604ae718c880a72e727d8a7979f7581ca3db6895e5e32a739e857676ff23cae8cdac000e25c10154854cdaab695dd91b19730201ca99b1654265a9a369441bfaca2870306ca64e37d10ce05746f462504bbea197bab8398cc7b424d2f93e29997e5a3319a076b7eeec2f3344a6f240588492ae59a69bf5591e687f9d25f4c3d59d6f45b2c911759f516289cb8