www-uat.barclayscorporate.com

- Barclays PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 76:c4:3c:ef:02:23:ba:85:00:00:00:00:54:cd:ce:7c was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Organization unit: Web and Infrastructure Services EXPI-D02C2-LTMCS-01-51
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:c4:3c:ef:02:23:ba:85:00:00:00:00:54:cd:ce:7c
Serial Number (int): 157867829567662122464155309803056254588
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 50:29:cd:47:6c:6b:85:d3:0c:47:0e:b0:03:04:dd:3b:5f:8f:f1:98
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 63:4c:70:41:9a:9f:8d:58:46:55:75:99:14:3a:05:a6:fa:66:bb:be
Fingerprint (sha256): 7a:46:71:20:08:c6:23:79:d8:59:95:3a:e1:1f:b4:a4:3e:88:cc:1a:0a:69:b1:d5:27:91:20:02:39:c8:e5:dc

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate www-uat.barclayscorporate.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-uat.barclayscorporate.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-uat.barclayscorporate.com
www-uat-pi.barclayscorporate.com
piwwwstage.barcorp.com
euwwwstage.barcorp.com

Other certificates including the domain name barclayscorporate.com

(limited to 100 certificates)
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
signingsoftware.barclayscorporate.com
www-qa.fxrates.uk.barclays
research.barclayscorporate.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-qa.barclayscorporate.com
www-uat.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
www-qa.barclayscorporate.com
signingsoftware.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-uat.barclayscorporate.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www.twc.barclayscorporate.com
research.barclayscorporate.com
www.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.barclayscorporate.com
www.media.barclayscorporate.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www.twc.barclayscorporate.com
international.barclays.com
www.media.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
ask.barclayscorporate.com
www.sf.barclayscorporate.com
research.barclayscorporate.com
contingency.barclayscorporate.com
www-qa.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
www.sf.barclayscorporate.com
research-uat.barclayscorporate.com
international.barclays.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-uat.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.media.barclayscorporate.com
www.sf.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
international.barclays.com
research.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
contingency.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
research.barclayscorporate.com
www.twc.barclayscorporate.com
research-qa.barclayscorporate.com

Certificate

The complete raw certificate details for www-uat.barclayscorporate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqfzg+/D8cKFamNDj73R
44PScCzJvcw2OAM88Vvf+/O+Z/i1S7SUq4Pjl9BJ1hEUDJ5sWszKvkkw6zwkWdp+
wcZOKjrYlKG1N9OQk4EfOVcOnFP41HMETm98ffB5+lSDS/HwBLoQ2W/UakyL3OO1
yU7Ld7AcYJGqqS/5meEiGhtpBuTtYDdEpoRSjF+yLkif+HY055rTewtcnDDqsCFm
VQqnv2DfVxUz/W2x6PIpaEQp+qdbQicjOFfNqOf4VwvNQaZfRYRBlbOwx5HbJ86b
Df3ZXGNnA5bWhDxvZuHyAvzhMIx4kuBctOrUyw0y91RDPzFAvNB6rYaxiUqPbEaJ
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157867829567662122464155309803056254588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 13:29:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 13:59:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web and Infrastructure Services EXPI-D02C2-LTMCS-01-51'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-uat.barclayscorporate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24068097782759663438625123049618569281317163519674468662480599907415870584272386315465380475609233800538771506095762855683991013867161992436845714673579729561355099782659493503373698969026072977148519431238724067007631460579774493878766324971716794481552565923142891984550137568639908062542340135616500125194859897483980859862618683956859725220441786723676051491300749865100017518115840489455404375346939894297233624970809172571821346012190502100434667606581091301891856878517668175304254447677811401725555127841762011604900663145498980102933135152877280489497531944308247301340139023170166082990449239020098564819339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat-pi.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwwwstage.barcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euwwwstage.barcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5029cd476c6b85d30c470eb00304dd3b5f8ff198
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b60c1f077257cfe0e878cee24a6cd41ab35cec274fb138b800a982f52ab8453e6ef99f27519a15abde025ff8ae0129603c093fbcefdafda4b74186906653ae4ceb43a024f1e4c7e2329bfad6486ad1f94a129529e6d2b5507947aae139d39ad3ca6c1f4ab242b99d427c033522041d5656db795266f2ad3705d381de2aedc8ef0391036aab46aecb55c87b619e51fe5cba5717d23f4f5b655a4588127687199761b74b2796fbc0542c7d964ef4976d089105bc13685e9c362908eb6451f7ccc18e5a4bd59764ae7355f534e6c5d58f4905446e62aa6d5defbf34b10e382d1d89dfeaf5bdeed54778f20dd26b41d4e4fe5ea429695e610b3b5b5920b1cede58a1