vacagtest.vpn.va.gov

Issued by Veterans Affairs Device CA B2

About this certificate


This digital certificate with serial number 03:be:c3 was issued on by Veterans Affairs Device CA B2.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

vacagtest.vpn.va.gov

Organization unit: devices

Veterans Affairs Device CA B2

Organization unit: Services
Organization unit: PKI

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:c3
Serial Number (int): 245443
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: d6:d9:23:d5:f3:f5:19:e6:10:ba:61:df:10:34:d8:cd:97:44:95:85
AuthorityKeyId: 81:94:35:9e:2a:a8:77:60:23:66:ec:2a:9d:6e:cf:b6:75:19:50:5d

Fingerprint (sha1): 5c:03:16:48:ac:69:6f:5a:91:23:e3:a5:c9:3d:66:8a:41:54:09:bb
Fingerprint (sha256): a9:c6:2b:e6:44:fd:9f:38:a7:1d:62:68:99:da:88:5f:3f:b8:58:73:d8:b3:9d:bd:1f:34:52:95:07:e2:da:21

Issuing Certificate URL: http://aia1.ssp-strong-id.net/CA/VAdeviceCA.p7c
Issuing Certificate URL: ldap://dir1.ssp-strong-id.net/cn=Veterans%20Affairs%20Device%20CA%20B2,ou=PKI,ou=Services,dc=va,dc=gov?cACertificate

Revocation information

OCSP Server: http://ocsp.pki.va.gov/
OCSP Server: http://ocsp1.ssp-strong-id.net/VA-SSP-CA-B2
CRL Distribution Point: http://crl.pki.va.gov/PKI/CRL/vadevice.crl
CRL Distribution Point: ldap://ldap.pki.va.gov/cn%3dSSPB2AE,cn%3dCDP,cn%3dPKI,cn%3dServices,dc%3dva,dc%3dgov?certificateRevocationList
CRL Distribution Point: http://cdp1.ssp-strong-id.net/CDP/vadevice.crl
CRL Distribution Point: ldap://dir1.ssp-strong-id.net/cn%3dVeterans%20Affairs%20Device%20CA%20B2,ou%3dPKI,ou%3dServices,dc%3dva,dc%3dgov?certificateRevocationList

Check the revocation status for the current certificate on vacagtest.vpn.va.gov
4
DNS Names
1
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

vacagtest.vpn.va.gov
vacagdev.vpn.va.gov
vacagdevpiv.vpn.va.gov
vacagtestpiv.vpn.va.gov
[email protected]; [email protected]

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIDA77DMA0GCSqGSIb3DQEBCwUAMHIxEzARBgoJkiaJk/Is ZAEZFgNnb3YxEjAQBgoJkiaJk/IsZAEZFgJ2YTERMA8GA1UECxMIU2VydmljZXMx DDAKBgNVBAsTA1BLSTEmMCQGA1UEAxMdVmV0ZXJhbnMgQWZmYWlycyBEZXZpY2Ug Q0EgQjIwHhcNMTMxMTI2MTkxNDIzWhcNMTYxMTI2MTkxNDIzWjBaMRMwEQYKCZIm iZPyLGQBGRYDZ292MRIwEAYKCZImiZPyLGQBGRYCdmExEDAOBgNVBAsTB2Rldmlj ZXMxHTAbBgNVBAMTFHZhY2FndGVzdC52cG4udmEuZ292MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAl5h9r1G5Cje4zINlpI2UnL/MK24d3JF8NoBCQ1uB mTzJTQh1Aap85p0Ej5s+Bpxl27RfF2U/OmJ6f/LISyDUZGbcUkAIlIafZAA5dw+3 6GTbO6IpFMj+OwJXwN4IeMjr0olZheutwQBp3uLt3dMr9UOHzR8lXg5xqPcILxJo V2Jz/VT8apg/yWi+tuMKWCHIRMQfKGobeyLmHP+qSHM49OW1x7bT3+XX9UyW/Jyw rzmFElUSvH+ZUHDoG15PfGktdMna5bq/EuAI5rCgJP7lU35W4LMfAO/YS5bDK9/I tSh+dumYVTTlxEnR7Fzx6YIg7vTYYuQ1BW+K4HJFifk0lwIDAQABo4ID+jCCA/Yw gagGA1UdEQSBoDCBnYE/dmFuc29jcmVtb3RlYWNjZXNzbWFuYWdlbWVudEB2YS5n b3Y7IFZBTlNPQ0JQRU9wZXJhdGlvbnNAdmEuZ292ghR2YWNhZ3Rlc3QudnBuLnZh LmdvdoITdmFjYWdkZXYudnBuLnZhLmdvdoIWdmFjYWdkZXZwaXYudnBuLnZhLmdv doIXdmFjYWd0ZXN0cGl2LnZwbi52YS5nb3YwFwYDVR0gBBAwDjAMBgpghkgBZQMC AQMIMIIBMAYIKwYBBQUHAQEEggEiMIIBHjA7BggrBgEFBQcwAoYvaHR0cDovL2Fp YTEuc3NwLXN0cm9uZy1pZC5uZXQvQ0EvVkFkZXZpY2VDQS5wN2MwgYAGCCsGAQUF BzAChnRsZGFwOi8vZGlyMS5zc3Atc3Ryb25nLWlkLm5ldC9jbj1WZXRlcmFucyUy MEFmZmFpcnMlMjBEZXZpY2UlMjBDQSUyMEIyLG91PVBLSSxvdT1TZXJ2aWNlcyxk Yz12YSxkYz1nb3Y/Y0FDZXJ0aWZpY2F0ZTAjBggrBgEFBQcwAYYXaHR0cDovL29j c3AucGtpLnZhLmdvdi8wNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwMS5zc3Atc3Ry b25nLWlkLm5ldC9WQS1TU1AtQ0EtQjIwDgYDVR0PAQH/BAQDAgWgMCcGA1UdJQQg MB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIYIZIAWUDBgcwHwYDVR0jBBgwFoAUgZQ1 niqod2AjZuwqnW7PtnUZUF0wggGBBgNVHR8EggF4MIIBdDAwoC6gLIYqaHR0cDov L2NybC5wa2kudmEuZ292L1BLSS9DUkwvdmFkZXZpY2UuY3JsMHSgcqBwhm5sZGFw Oi8vbGRhcC5wa2kudmEuZ292L2NuJTNkU1NQQjJBRSxjbiUzZENEUCxjbiUzZFBL SSxjbiUzZFNlcnZpY2VzLGRjJTNkdmEsZGMlM2Rnb3Y/Y2VydGlmaWNhdGVSZXZv Y2F0aW9uTGlzdDA0oDKgMIYuaHR0cDovL2NkcDEuc3NwLXN0cm9uZy1pZC5uZXQv Q0RQL3ZhZGV2aWNlLmNybDCBk6CBkKCBjYaBimxkYXA6Ly9kaXIxLnNzcC1zdHJv bmctaWQubmV0L2NuJTNkVmV0ZXJhbnMlMjBBZmZhaXJzJTIwRGV2aWNlJTIwQ0El MjBCMixvdSUzZFBLSSxvdSUzZFNlcnZpY2VzLGRjJTNkdmEsZGMlM2Rnb3Y/Y2Vy dGlmaWNhdGVSZXZvY2F0aW9uTGlzdDAdBgNVHQ4EFgQU1tkj1fP1GeYQumHfEDTY zZdElYUwDQYJKoZIhvcNAQELBQADggEBAJCW9ByWua0ebqgJSC56I1i/yC9wD6gH SaOmxmcPs3tS66ONuo1udw0dLXAbcZx830fZkijMXoGGO5yaPKwEzBNYg5dRkzJi qcJpQx1ASN3NXSiqdzR7X4TDUW43bCNsXRpQAt7evZP9HBz1ywIMnT8jGOYi/TQr B3UPkkN4hgE2KmlRr+auU1HJPIvAtzmoussWb4KIuuXwxencXjPSZZ3QB88Pm7rr PFoQEKgeAykaH8wVFCB4n5lGyo3aTVCz85df5UIoNml6Y9UBlUAmNn9AYxOvtPA2 c+QB4naTP/5/UeoLpC5mCpMM5tORyUGlTLAFg2Dow9dCDXo1iuxu5hM= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5h9r1G5Cje4zINlpI2U nL/MK24d3JF8NoBCQ1uBmTzJTQh1Aap85p0Ej5s+Bpxl27RfF2U/OmJ6f/LISyDU ZGbcUkAIlIafZAA5dw+36GTbO6IpFMj+OwJXwN4IeMjr0olZheutwQBp3uLt3dMr 9UOHzR8lXg5xqPcILxJoV2Jz/VT8apg/yWi+tuMKWCHIRMQfKGobeyLmHP+qSHM4 9OW1x7bT3+XX9UyW/JywrzmFElUSvH+ZUHDoG15PfGktdMna5bq/EuAI5rCgJP7l U35W4LMfAO/YS5bDK9/ItSh+dumYVTTlxEnR7Fzx6YIg7vTYYuQ1BW+K4HJFifk0 lwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 245443 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'gov' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'va' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Veterans Affairs Device CA B2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-26 19:14:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-26 19:14:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'gov' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'va' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devices' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vacagtest.vpn.va.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19137180143076975455070752623397027542071117563481887831866663209702594267475784152615231912898306111150020406123621242703881088375837053348472012947673247189277132380981696470488345805436633268370611723536359263661025493216075048580695730617330654002789808565560455354395879558499373545771358261886975024681955848714212583847220140837760350118850949008464096609270735383045382705636310676460244405985515109458440208803985270332665574797242528239717484165517506692385498742606543246330104611413100979575870255515510907967183293977484223742500149083314259463089163722392099534116796070321946416487735394899085468710039 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]; [email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacagtest.vpn.va.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacagdev.vpn.va.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacagdevpiv.vpn.va.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacagtestpiv.vpn.va.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.2.1.3.8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.ssp-strong-id.net/CA/VAdeviceCA.p7c' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://dir1.ssp-strong-id.net/cn=Veterans%20Affairs%20Device%20CA%20B2,ou=PKI,ou=Services,dc=va,dc=gov?cACertificate' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.va.gov/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.ssp-strong-id.net/VA-SSP-CA-B2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.6.7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8194359e2aa877602366ec2a9d6ecfb67519505d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (376 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.va.gov/PKI/CRL/vadevice.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.pki.va.gov/cn%3dSSPB2AE,cn%3dCDP,cn%3dPKI,cn%3dServices,dc%3dva,dc%3dgov?certificateRevocationList' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.ssp-strong-id.net/CDP/vadevice.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://dir1.ssp-strong-id.net/cn%3dVeterans%20Affairs%20Device%20CA%20B2,ou%3dPKI,ou%3dServices,dc%3dva,dc%3dgov?certificateRevocationList' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d6d923d5f3f519e610ba61df1034d8cd97449585 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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