vodafone.compass.it
- Compass Banca spa -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 23:f8:74:7d:51:e5:2a:f2:0f:2c:49:e4:cc:87:07:c2 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Compass Banca spa
Organization:
Compass Banca spa
Locality:
Milano
Country: IT
Country: IT
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 23:f8:74:7d:51:e5:2a:f2:0f:2c:49:e4:cc:87:07:c2Serial Number (int): 47813032161768363293138564340704020418
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 09:07:bb:41:d2:9e:92:99:54:51:fc:c7:86:4b:f7:13:2c:34:72:93
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): ab:0b:5d:3c:47:a4:8a:48:6b:81:37:ef:e5:a6:34:5b:1c:35:fa:97
Fingerprint (sha256): 73:bc:74:4d:24:11:6f:14:45:3c:82:18:a1:7d:83:56:a9:2d:dd:5e:ed:a6:e6:25:98:c4:14:c0:ae:f9:76:cf
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate vodafone.compass.it
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vodafone.compass.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vodafone.compass.it
www.vodafone.compass.it
www.vodafone.compass.it
Other certificates including the domain name compass.it
(limited to 100 certificates)
passcom.compassonline.it
wmbldi.compass.it
ds-richiesta.compass.it
richiesta.compass.it
m.compass.it
assicurazioni.compass.it
fidoposbancoposta.compass.it
cometa.compass.it
www.compass.it
mailsync.compass.it
lmm.compass.it
wmbldi.compass.it
www.compass.it
compasspay.compass.it
*.compass.it
passcom.compassonline.it
prestiti.compass.it
secure.compass.it
fidoposbancoposta.compass.it
cmiep.compass.it
compasspay.compass.it
www.compass.it
fidoposbancoposta.compass.it
www.compass.it
uploaddocumenti.compass.it
pdaH3G.compass.it
assicurazioni.compass.it
loginpage-ext.compass.it
richiesta.compass.it
www.compass.it
vodafone.compass.it
ariadipremi.compass.it
www.compass.it
richiesta.compass.it
fidoposbancoposta.compass.it
loginpage.compass.it
20annicarte.compass.it
www.compass.it
sviluppo.assicurazioni.compass.it
prestiti.compass.it
richiesta.compass.it
compasspay.compass.it
cartabancopostapiu.compass.it
ariadipremi.compass.it
ds-richiesta.compass.it
loginpage.compass.it
cartabancopostapiu.compass.it
promoepremi.compass.it
pdaH3G.compass.it
eap01.mediobanca.com
pdah3g.compass.it
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
compasspay.compass.it
pdaH3G.compass.it
www.compass.it
pdaH3G.compass.it
compasspay.compass.it
fidoposbancoposta.compass.it
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
cmiep.compass.it
www.compass.it
welcome.compass.it
sviluppo.assicurazioni.compass.it
bol.compass.it
wmbldi.compass.it
ds-richiesta.compass.it
richiesta.compass.it
m.compass.it
assicurazioni.compass.it
fidoposbancoposta.compass.it
cometa.compass.it
www.compass.it
mailsync.compass.it
lmm.compass.it
wmbldi.compass.it
www.compass.it
compasspay.compass.it
*.compass.it
passcom.compassonline.it
prestiti.compass.it
secure.compass.it
fidoposbancoposta.compass.it
cmiep.compass.it
compasspay.compass.it
www.compass.it
fidoposbancoposta.compass.it
www.compass.it
uploaddocumenti.compass.it
pdaH3G.compass.it
assicurazioni.compass.it
loginpage-ext.compass.it
richiesta.compass.it
www.compass.it
vodafone.compass.it
ariadipremi.compass.it
www.compass.it
richiesta.compass.it
fidoposbancoposta.compass.it
loginpage.compass.it
20annicarte.compass.it
www.compass.it
sviluppo.assicurazioni.compass.it
prestiti.compass.it
richiesta.compass.it
compasspay.compass.it
cartabancopostapiu.compass.it
ariadipremi.compass.it
ds-richiesta.compass.it
loginpage.compass.it
cartabancopostapiu.compass.it
promoepremi.compass.it
pdaH3G.compass.it
eap01.mediobanca.com
pdah3g.compass.it
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
compasspay.compass.it
pdaH3G.compass.it
www.compass.it
pdaH3G.compass.it
compasspay.compass.it
fidoposbancoposta.compass.it
sviluppo.assicurazioni.compass.it
assicurazioni.compass.it
cmiep.compass.it
www.compass.it
welcome.compass.it
sviluppo.assicurazioni.compass.it
bol.compass.it
Certificate
The complete raw certificate details for vodafone.compass.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIQI/h0fVHlKvIPLEnkzIcHwjANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDA1MDcxNTUyMjJaFw0yNTA2MDYxNTUyMjFaMFgxCzAJBgNVBAYTAklUMQ8wDQYD VQQHEwZNaWxhbm8xGjAYBgNVBAoTEUNvbXBhc3MgQmFuY2Egc3BhMRwwGgYDVQQD ExN2b2RhZm9uZS5jb21wYXNzLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtp8V4fhy2S+YU4TUMoLxeY0yPd2w1yRtFL1YoojmqSjde7OVqmVOId1t 5EFjILQn7gB1GoPQbxbd3lixDRVOuLAKRtpQ3hsShR+rOabmcsdvWsh1tWhL11N2 dNh6HltoULwimQBQliP16WWi3K4Che2ehKDpNzhmKKtVrgMZ/JHnyMMLUEn5MLPd h9HUg+9MGUIDo5UnEiQ2JSCkMRimZz/InTbs796FH+C8l1ubBU5VgXHbmB4rSeN+ JpR1SyVjKqjtIuuTVegVL2rLU6qAmam3bJ8I9dSIgUFOG+FmWK25C6vbVJ0krAPA wZLDyx/bvLg4HIi5Qx9SFcVM4cy24QIDAQABo4IBgzCCAX8wDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUCQe7QdKekplUUfzHhkv3Eyw0cpMwHwYDVR0jBBgwFoAUgqJw dN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdo dHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5l bnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0 dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwNwYDVR0RBDAwLoITdm9k YWZvbmUuY29tcGFzcy5pdIIXd3d3LnZvZGFmb25lLmNvbXBhc3MuaXQwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjATBgNVHSAE DDAKMAgGBmeBDAECAjATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF AAOCAQEAeeJ5k600Sm+lqzKnNxCvxhvLHYEo9gaBxRz6MOykcDt83UEIARzl2xWq mo5alk2goPEkGYR7wROO78KaDbJOhW24YlSngl77X+bCHwg/hJcSN2T2wQR/FqDi C2qhvjjEJfj9YIGFN0AKlrHYsQ+MTwcQVZL2PnSnk49oxf8XrZepYMoXGcSlGJ8b YRUKkMB8i6pWIC2ihhg4Pb3PmLxZjk0oHcVdJkaB7c/QEZZTopHf/QqHGBHp0Dt0 hGbsHK6ZNmsLjMrQSwXuLdqSAd8UedN6tmoQVmR2yvCNVlwMHSGXfaYVfTkUZ6Qp OeW7E/cQa686S/qdY6gY1QiiXscSTw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp8V4fhy2S+YU4TUMoLx eY0yPd2w1yRtFL1YoojmqSjde7OVqmVOId1t5EFjILQn7gB1GoPQbxbd3lixDRVO uLAKRtpQ3hsShR+rOabmcsdvWsh1tWhL11N2dNh6HltoULwimQBQliP16WWi3K4C he2ehKDpNzhmKKtVrgMZ/JHnyMMLUEn5MLPdh9HUg+9MGUIDo5UnEiQ2JSCkMRim Zz/InTbs796FH+C8l1ubBU5VgXHbmB4rSeN+JpR1SyVjKqjtIuuTVegVL2rLU6qA mam3bJ8I9dSIgUFOG+FmWK25C6vbVJ0krAPAwZLDyx/bvLg4HIi5Qx9SFcVM4cy2 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 47813032161768363293138564340704020418 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 15:52:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-06 15:52:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Compass Banca spa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vodafone.compass.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23053819477454727279692185812806524611742549605387253779382143668277609129886408429797161889278967092284481431359629830393909904780655197892158856524220657808139814260792143169023728363279563317788867534052030699052836759286352342690017121987030341916582896462301897867256924346829775908212908215976265347101972773460889849058000568637662704210738007262201385911294292660830739899388087095858980232122896275679662818458272080441659803924605164403038030420338531786192639817113797388278811713398538845026904173452278014699721494897888092340574983199876171385394471626585994945224588829276607701405426756710858209670881 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0907bb41d29e92995451fcc7864bf7132c347293 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodafone.compass.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vodafone.compass.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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