52mpls-ws-511.area52.afnoapps.usaf.mil

- U.S. Government -

Issued by DOD CA-21

About this certificate

This digital certificate with serial number 01:13:f4 was issued on by U.S. Government.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 3 DNS name(s) are bare public suffixes: sammc-eis, wilfordhall, 52mpls-ws-511 The domain SHOULD NOT have a bare public suffix (awslabs certlint)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USAF
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:13:f4
Serial Number (int): 70644
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: e3:f2:69:c0:a8:9b:45:89:59:8f:d4:2b:ac:54:d9:e9:f3:19:d0:b4
AuthorityKeyId: 09:99:13:e2:a3:d5:e7:74:d8:f6:3f:b5:dc:fb:d4:b5:16:ed:4c:d3

Fingerprint (sha1): a1:4d:c9:1d:5d:6d:3a:18:e9:ca:0b:10:e4:3a:df:44:8e:b2:63:c0
Fingerprint (sha256): 7c:52:d2:74:59:2f:c6:5c:a7:0c:8d:6e:03:08:c1:c2:53:c8:62:b5:e7:59:63:84:28:97:97:f8:6c:77:2b:c9

Issuing Certificate URL: http://crl.disa.mil/sign/DODCA_21.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODCA_21.crl
CRL Distribution Point: ldap://crl.gds.disa.mil/cn%3dDOD%20CA-21%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary

Check the revocation status for certificate 52mpls-ws-511.area52.afnoapps.usaf.mil

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 52mpls-ws-511.area52.afnoapps.usaf.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Any

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

52mpls-ws-511.area52.afnoapps.usaf.mil
sammc-eis
sammc-eis.lackland.af.mil
*.sammc-eis
*.sammc-eis.lackland.af.mil
wilfordhall
wilfordhall.lackland.af.mil
*.wilfordhall
*.wilfordhall.lackland.af.mil
52mpls-ws-511

Other certificates including the domain name usaf.mil

(limited to 100 certificates)
FTEV-WXA-B02P.AREA52.AFNOAPPS.USAF.MIL
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52vejx-ucpool-003.area52.afnoapps.usaf.mil
pcwsvm701b.area52.afnoapps.usaf.mil
52vejx-ucpool-001.area52.afnoapps.usaf.mil
52uhhz-ucpool-001.area52.afnoapps.usaf.mil
52snaq-ucpool-001.area52.afnoapps.usaf.mil
epex.moody.af.mil
52zhtx-ucpool-004.area52.afnoapps.usaf.mil
plk-rcdb-01.area52.afnoapps.usaf.mil
sammc-eis.lackland.af.mil
52tdka-emts-a2.area52.afnoapps.usaf.mil
HKRV-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52mqna-css-f01v.area52.afnoapps.usaf.mil
52tyfr-ucpool-001.area52.afnoapps.usaf.mil
52sdhm-ucpool-001.area52.afnoapps.usaf.mil
apps.tinker.af.mil
52lktc-as-epex.area52.afnoapps.usaf.mil
mail.acc.af.mil
52PSXX-VPN-003.us.af.mil
AYZZ-WS-001P.AREA52.AFNOAPPS.USAF.MIL
52qkkg-css-f02v.area52.afnoapps.usaf.mil
52mpls-ap-354.AREA52.AFNOAPPS.USAF.MIL
52zhtx-ucpool-002.area52.afnoapps.usaf.mil
52mpls-ws-511.area52.afnoapps.usaf.mil
147PEX.ANG.AF.MIL
qkkg-ws-pex2p.area52.afnoapps.usaf.mil
tstinfra02.tinker.af.mil
eim.us.af.mil
prdinfra01.tinker.afmc.ds.af.mil
apps.afnoapps.usaf.mil
52VDYD-WS-001.area52.afnoapps.usaf.mil
52VEJX-SP-012v.area52.afnoapps.usaf.mil
prdinfra02.tinker.af.mil
AFOSILMS.us.af.mil
52sgbp-WPS-SP13v.area52.afnoapps.usaf.mil
52mlwx-css-f02v.area52.afnoapps.usaf.mil
52VEJX-SP-001v.area52.afnoapps.usaf.mil
gcdsaf17.af.mil
126arw-ii-03.area52.afnoapps.usaf.mil
52PRPX-VPN-001.us.af.mil
uhhz-as-011v.afnoapps.usaf.mil
52PRPX-VPN-002.us.af.mil
52qkkg-css-f01v.area52.afnoapps.usaf.mil
lke-epex-01.area52.afnoapps.usaf.mil
52ljyc-css-f01v.area52.afnoapps.usaf.mil
52vejx-ucpool-002.area52.afnoapps.usaf.mil
52VDYD-WS-002.area52.afnoapps.usaf.mil
samhs.health.us.af.mil
52lxez-ucpool-001.area52.afnoapps.usaf.mil
52mlwx-css-f01v.area52.afnoapps.usaf.mil
52zhtx-ucpool-003.area52.afnoapps.usaf.mil
52zhtx-ucpool-001.area52.afnoapps.usaf.mil

Certificate

The complete raw certificate details for 52mpls-ws-511.area52.afnoapps.usaf.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd2MpnKH/Cpi/RZHnt4r
Nb6UQbrpFA6uAq64KeqtWR8bGinxz+aXXWD8AjmhXdHBdkxm4LYVhNXpxpl1o8Ge
f95YbY0/sTVEPWzkcVLpc5kxCGQfzQUNcRh8JJrNUX/QHSwkijEOTXrYG1/meW9I
O7ei4d+nkiF+vsQV1+fM7lutvdfzdg6WZJP4EyGlhkw4W9PGFtgU6/CNUPy52xih
a3EpBTb5UjNo7xMQWSjNCsCwTx+7SNj6ZtW0NcPSHiuMHRQSR1HllOXIEcoeouUA
+vU2mk1bsZrB//VfeQqvjIfGuBeO65c7XIsGe823Lo3Rg4BTariQjb9Oxwd/m/I+
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD CA-21'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-10-25 20:13:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-25 20:13:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '52mpls-ws-511.area52.afnoapps.usaf.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19928663967908521194050503956027360828365576436655474096300322604171271212818246388563223972024620412393377826144183348473387356313174059566989144113213707907443136303140496693236715954978688266720507922944954730143278061264368130643875388951085158906433413125920591756598424280078325985417697507514686663655910359241723020068306985089023770712949807894567358510483479023528947886603548973637996222616018769818792760340793567412727539741058161947977529244734690567319193927394909096750628453473498579649470172506769426957777728804761909684791408928353713831538632763383398461004741540570736288008309183517342523604529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 099913e2a3d5e774d8f63fb5dcfbd4b516ed4cd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3f269c0a89b4589598fd42bac54d9e9f319d0b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODCA_21.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODCA_21.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://crl.gds.disa.mil/cn%3dDOD%20CA-21%2cou%3dPKI%2cou%3dDoD%2co%3dU.S.%20Government%2cc%3dUS?certificaterevocationlist;binary'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (226 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52mpls-ws-511.area52.afnoapps.usaf.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammc-eis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammc-eis.lackland.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sammc-eis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sammc-eis.lackland.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilfordhall'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilfordhall.lackland.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilfordhall'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilfordhall.lackland.af.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52mpls-ws-511'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.5 (usDODClass3)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37.0 (anyExtendedKeyUsage)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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