jispsa.jisedu.or.id

- Jakarta International School -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 68:33:f4:0f:0b:38:15:a8:dd:f4:7b:fa was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jakarta International School

Organization: Jakarta International School
Organization unit: IT
State / Province: Jakarta
Locality: Jakarta
Country: ID

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 68:33:f4:0f:0b:38:15:a8:dd:f4:7b:fa
Serial Number (int): 32249248773151634482498141178
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9b:68:d9:87:6a:9a:0f:45:d7:76:de:e6:23:9e:87:73:b6:aa:6d:d1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 3e:a7:32:c0:1f:0f:96:45:21:a2:b5:b2:fa:21:74:5b:e7:bc:cb:e5
Fingerprint (sha256): 73:14:2c:ef:1a:0b:2e:d7:ac:b2:d1:ea:a9:da:f2:5c:fe:3c:16:7b:11:2d:d9:ef:3d:fe:ce:39:3f:c5:55:3e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate jispsa.jisedu.or.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jispsa.jisedu.or.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jispsa.jisedu.or.id

Other certificates including the domain name jisedu.or.id

(limited to 100 certificates)
www.jisedu.or.id
ldpr.jisedu.or.id
campusonline.jisedu.or.id
campus.jisedu.or.id
jisacademy.jisedu.or.id
CCM-CIL.jisedu.or.id
www1.jisedu.or.id
JISCUP01.jisedu.or.id
alumni.jisedu.or.id
uatcampus.jisedu.or.id
dragontales.jisedu.or.id
campusonline.jisedu.or.id
dragontales.jisedu.or.id
jispsvm2.jisedu.or.id
jisnet.jisedu.or.id
jispsa.jisedu.or.id
jisacademy.jisedu.or.id
jispsvm4.jisedu.or.id
www.jisedu.or.id
joinus.jisedu.or.id
apps.jisedu.or.id
www1.jisedu.or.id
dragontales.jisedu.or.id
EWCORE.jisedu.or.id
jisap.jisedu.or.id
jispstest.jisedu.or.id
campusonline.jisedu.or.id
www1.jisedu.or.id
jispsa.jisedu.or.id
EWEDGE.jisedu.or.id
alumni.jisedu.or.id
alumni.jisedu.or.id
www.jisedu.or.id
dragontales.jisedu.or.id
jisacademy.jisedu.or.id
alumni.jisedu.or.id
cr.jisedu.or.id
jisap.jisedu.or.id
jisnet.jisedu.or.id
CCM-PAT.jisedu.or.id
jisacademy.jisedu.or.id
dragontales.jisedu.or.id
joinus.jisedu.or.id
jiscup01.jisedu.or.id
is-helpdesk.jisedu.or.id
jisnet.jisedu.or.id
jisacademy.jisedu.or.id
www.jisedu.or.id
jisedu.or.id
campusonline.jisedu.or.id
campusonline.jisedu.or.id
EWCORE.jisedu.or.id
library.jisedu.or.id
is-helpdesk.jisedu.or.id
www.jisedu.or.id
jisap.jisedu.or.id
EWEDGE.jisedu.or.id
jisnet.jisedu.or.id
www.jisedu.or.id
www1.jisedu.or.id
jisap.jisedu.or.id
jisap.jisedu.or.id
jisap.jisedu.or.id
jisweb.jisedu.or.id
CCM-PAT.jisedu.or.id
CCM-CIL.jisedu.or.id
www.jisedu.or.id
jisacademy.jisedu.or.id
apps.jisedu.or.id
EWEDGE.jisedu.or.id
jispsvm3.jisedu.or.id
JISCUP01.jisedu.or.id
www1.jisedu.or.id
jisnet.jisedu.or.id
alumni.jisedu.or.id
jisap.jisedu.or.id
CCM-CIL.jisedu.or.id
jiscup01.jisedu.or.id
CCM-CIL.jisedu.or.id
jispsa.jisedu.or.id
apps.jisedu.or.id
jispsvm4.jisedu.or.id
alumni.jisedu.or.id
moodle.jisedu.or.id
library.jisedu.or.id
jisnet.jisedu.or.id
jisacademy.jisedu.or.id
library.jisedu.or.id
CCM-PAT.jisedu.or.id
www.jisedu.or.id
www.jisedu.or.id
is-helpdesk.jisedu.or.id
jispsa.jisedu.or.id
jisnet.jisedu.or.id
CCM-PAT.jisedu.or.id
jisacademy.jisedu.or.id
joinus.jisedu.or.id
JISCUP01.jisedu.or.id
jismail.jisedu.or.id
jisedu.or.id

Certificate

The complete raw certificate details for jispsa.jisedu.or.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgIMaDP0Dws4Fajd9Hv6MA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMDAxMjQwMDUxMjVaFw0y
MTA0MTQwMTA2MDRaMIGDMQswCQYDVQQGEwJJRDEQMA4GA1UECBMHSmFrYXJ0YTEQ
MA4GA1UEBxMHSmFrYXJ0YTELMAkGA1UECxMCSVQxJTAjBgNVBAoTHEpha2FydGEg
SW50ZXJuYXRpb25hbCBTY2hvb2wxHDAaBgNVBAMTE2ppc3BzYS5qaXNlZHUub3Iu
aWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/4o7NynBY0P2wa3M
JU6niF1qVx9ySQUeYaLyIFowsgBXiXOE6ijf/W061o1sFKzyTPd0EEc91CY6EUEm
L6oFI4dYMpNDXwiiMpACn1BKXaxi0fL2rkLCG/nEW+pd8asVHs7McxH0HcmblfDP
l9rair73UaNNs+mcSUz19dH2u3Hs/WA6NtDc9mSAK9jmAZVPixbafmt9RGDWibsG
916j0iE5iyEeYX1nd8A2G/81iRO7KRAJAXI/9BDRllkw5siAUKtYyOY81q4KXn5p
bHVYuREplh+loiBXoLwHvCqHAu33DHajtgwF/YqPB3wETXP991h7FaSr2gL7+Ub4
OjSlAgMBAAGjggKOMIICijAOBgNVHQ8BAf8EBAMCBaAwgY4GCCsGAQUFBwEBBIGB
MH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2Fj
ZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2Nz
cC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJ
KwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24u
Y29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMB4GA1UdEQQXMBWC
E2ppc3BzYS5qaXNlZHUub3IuaWQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBSb
aNmHapoPRdd23uYjnodztqpt0TCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ALvZ
37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABb9UITaIAAAQDAEcwRQIh
AKNCeKvxjepUZctX+CV2qS+P9aBsfO+DCSegoyH3e0SbAiAfvctgrvMs1galV57C
7UEaLmpicGS85LkernWIoLkXEgB1AO7Ale6NcmQPkuPDuRvHEqNpagl7S2oaFDjm
R7LL7cX5AAABb9UITQsAAAQDAEYwRAIgSwGf5bEu2CieQr81yRTw+nV0lc5zjEQl
btpw4kPt5owCIG2yiXQ3y33ychMLrWu5RIw3EU5X1ztsxJ0pOiL/RgTAMA0GCSqG
SIb3DQEBCwUAA4IBAQBXVH6hapfQTdPBCl84s5MaB3x8mhGtA/KDuU4+6xl4q+k0
W+26OW6fHdpXN5mc8Pw6lQusHhQM+Ep6KINFqoieXAttvTLb++5agSJCY45uZgIN
3gPwe+LG5oCFsJ2fzu9VdVxVPjIG8imb/aaEJSxacfsKsLmpWee1Mo0/SPMb6B2Z
SdJunD+9nHrUReLBFa3cQzoDPhezvMPgLUYDxZHxnxfDrVYVgityxURGp7sBqheC
BgqXKgv+9FJVoQObVv1kVh82zLRnPd3C8cTpAEBsoub7JFIMShOdTcP/EQFE75p1
wu1Mtd38aksiZ2IisFHg9kLNA1KyBiM4FZ+qnqm9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP+KOzcpwWND9sGtzCVO
p4hdalcfckkFHmGi8iBaMLIAV4lzhOoo3/1tOtaNbBSs8kz3dBBHPdQmOhFBJi+q
BSOHWDKTQ18IojKQAp9QSl2sYtHy9q5Cwhv5xFvqXfGrFR7OzHMR9B3Jm5Xwz5fa
2oq+91GjTbPpnElM9fXR9rtx7P1gOjbQ3PZkgCvY5gGVT4sW2n5rfURg1om7Bvde
o9IhOYshHmF9Z3fANhv/NYkTuykQCQFyP/QQ0ZZZMObIgFCrWMjmPNauCl5+aWx1
WLkRKZYfpaIgV6C8B7wqhwLt9wx2o7YMBf2Kjwd8BE1z/fdYexWkq9oC+/lG+Do0
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32249248773151634482498141178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 00:51:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-14 01:06:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta International School'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jispsa.jisedu.or.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22848906347664226879087761082112983758500140303735649641986431775227824615761641627475983106417644632924709177004416677109961879636461754421754823752401851426530240243158040377782236570485467531899599774735524727334348802918102810339735339922212049739094918095632139283427638082529302454788334628061213611251515201728869872502569312276911256029956228664578936940043434657661672119985225745749914047906421381363451073404549840331880552803346216886580644346860514319191617115043513338072146692759954991111840133941147915584674479001914795405289027819997405798560141713040220909348912500189022390810357388537669518767269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jispsa.jisedu.or.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b68d9876a9a0f45d776dee6239e8773b6aa6dd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016fd5084da20000040300473045022100a34278abf18dea5465cb57f82576a92f8ff5a06c7cef830927a0a321f77b449b02201fbdcb60aef32cd606a5579ec2ed411a2e6a627064bce4b91eae7588a0b91712007500eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000016fd5084d0b000004030046304402204b019fe5b12ed8289e42bf35c914f0fa757495ce738c44256eda70e243ede68c02206db2897437cb7df272130bad6bb9448c37114e57d73b6cc49d293a22ff4604c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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