web.rong-data.com

- 上海荣数信息技术有限公司 -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5f:c9:f6:9f:56:04:0c:15:fe:29:cc:c5 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

上海荣数信息技术有限公司

Organization: 上海荣数信息技术有限公司
State / Province: 上海
Locality: 上海
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:c9:f6:9f:56:04:0c:15:fe:29:cc:c5
Serial Number (int): 29645234664155507921278061765
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bb:57:c2:22:5e:97:fc:92:07:b2:d9:f1:2e:d8:95:0e:98:17:e6:9e
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): f9:ae:a8:f9:73:03:f7:6c:bf:29:ed:65:9d:8a:64:c3:05:3d:2c:f5
Fingerprint (sha256): 7f:90:56:86:3c:92:1d:2e:52:ee:ce:3a:a1:f3:9f:e4:be:ba:b4:74:d9:76:68:19:36:f4:91:e2:54:c6:f4:17

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate web.rong-data.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.rong-data.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.rong-data.com
web.rs-ibg.com
hmall.huajifen.com

Other certificates including the domain name rong-data.com

(limited to 100 certificates)
resource.leagcard.com
mall.rong-data.com
resource.leagcard.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
mall.rong-data.com
www.rong-data.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
web.rong-data.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
api.rong-data.com
webrtc.rong-data.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
*.leagcard.com
mall.rong-data.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
mall.rong-data.com
webrtc.rong-data.com

Certificate

The complete raw certificate details for web.rong-data.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvDCCBaSgAwIBAgIMX8n2n1YEDBX+KczFMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTExMjgwNzIxMzZaFw0y
MTExMDYwODI5MTNaMHoxCzAJBgNVBAYTAkNOMQ8wDQYDVQQIDAbkuIrmtbcxDzAN
BgNVBAcMBuS4iua1tzEtMCsGA1UECgwk5LiK5rW36I2j5pWw5L+h5oGv5oqA5pyv
5pyJ6ZmQ5YWs5Y+4MRowGAYDVQQDExF3ZWIucm9uZy1kYXRhLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAM9TDrdwY77dfkOErshEP2RyiI/H9xsg
U68KKEdLr7GsRKDkUnW7DLjfAwFXEuNWKCwjxMG22DVNxgGe3J7mq8YPwqy0q3xM
iWOk9MzIfaVnYhgqAqmUDhXTehGND5dtmbHrgtVcEueiNWvI/eiHfqcn7qKSihW6
oGy4K7+SDBykf2Ijx2lhJyH4dK3he9OfNmI+99F4Lna9uB+WJu497MAbHXyDCFW/
CEdvSm7obj/NNPd6t6MQZJQXaoNY9EXE5VAiNIEZHQNkrK9RHDDlwVgx2Su4Xklz
zRunwmi/ZUrugUXWvajggQsFNZxsQ1EQHmZ6vMC3TzwA8iu2VFNi9T0CAwEAAaOC
A2owggNmMA4GA1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEF
BQcwAoY4aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2Fv
dnNzbGNhMjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNp
Z24uY29tL2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQw
NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np
dG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0
cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNybDBABgNV
HREEOTA3ghF3ZWIucm9uZy1kYXRhLmNvbYIOd2ViLnJzLWliZy5jb22CEmhtYWxs
Lmh1YWppZmVuLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD
VR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFLtXwiJel/yS
B7LZ8S7YlQ6YF+aeMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgCkuQmQtBhY
FIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW6w4w+0AAAEAwBHMEUCIQDFdpul
P5lJfPuIRrGnyjiyTYdbC77uJULtEGnTUWjqjgIgYbYw+5/de5M/Iavi0gvn27H3
IUrzagc1CSKGNUcso6gAdQBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOUsl7m9scO
ygAAAW6w4w6wAAAEAwBGMEQCIFoWp4A3Yy9HeAM0vFDvTevwGTgC5O4qvEU/eJiV
9U7nAiBS/cM6+eQ0W4X1DJL2CC36wldxJ/ucctq5ip6IYX3jWQB1AG9Tdqwx8DEZ
2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbrDjEDsAAAQDAEYwRAIgQY6+y6hT
ebtjpV4HG80H43CAcNX+H+1FzT+ikRL3nlMCIH6tR/AzjQ9x4jB5qjrgIfhwaMeh
gcTGok3EMVgjPobOMA0GCSqGSIb3DQEBCwUAA4IBAQCcs5C8va6CGNhWnWszJX91
8tp5soA9ilrnNiK+DshMrvfG7bWr+thTakqbYbKIh6DaX5IfC5hzZuRZISTvqW20
DaSev06wkotFWYTUGqulTDM+lbfSzyW9Xb6+Lw9nvYFq3mS/GX+pe7bisZnDXGfg
o4LuC0RnVfCul4amzsAWSGghUZBGNEUJV60qJSS+V+mvv/AVIe5/kBQ0mSONdRJ5
7gsNACrBcdoUGBVM0otIs6Rz22Xvh4FG8ttEJKvpPrjx3Y9pVPSxCaSaZ1m96cAr
W8tmqUkwMTOZ1ATUnNQSK4iNqKmRxpeLgtri50P8Ithkpmz6+aQD0qLxQHyKIb1t
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1MOt3Bjvt1+Q4SuyEQ/
ZHKIj8f3GyBTrwooR0uvsaxEoORSdbsMuN8DAVcS41YoLCPEwbbYNU3GAZ7cnuar
xg/CrLSrfEyJY6T0zMh9pWdiGCoCqZQOFdN6EY0Pl22ZseuC1VwS56I1a8j96Id+
pyfuopKKFbqgbLgrv5IMHKR/YiPHaWEnIfh0reF70582Yj730Xgudr24H5Ym7j3s
wBsdfIMIVb8IR29KbuhuP80093q3oxBklBdqg1j0RcTlUCI0gRkdA2Ssr1EcMOXB
WDHZK7heSXPNG6fCaL9lSu6BRda9qOCBCwU1nGxDURAeZnq8wLdPPADyK7ZUU2L1
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29645234664155507921278061765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 07:21:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-06 08:29:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海荣数信息技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.rong-data.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26172286301090307130153649905744888009783741428171971006535783400478704627231558821024463360675481922339958798865900476097560768577010547890705443635548071939600748246330104326627692277892925266524609111474798445895169947481732169858501530766155734374214156657119821873653346131627758952447774771882753660258357725459691120104032895605813527062826068521463809822284530107353767537771300031843727011400637775716768521471635435020333011148859255622592392714120704599171023840278951894485398389851471883913909470044152180320418096826792066011855805070975032544542127166121041803919470050552444718329603116174209632630077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.rong-data.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.rs-ibg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmall.huajifen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb57c2225e97fc9207b2d9f12ed8950e9817e69e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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