www.netresponse.cardiocom.va.gov

Issued by Veterans Affairs Device CA B2

About this certificate


This digital certificate with serial number 05:31:bf was issued on by Veterans Affairs Device CA B2.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

www.netresponse.cardiocom.va.gov

Organization unit: devices

Veterans Affairs Device CA B2

Organization unit: Services
Organization unit: PKI

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 05:31:bf
Serial Number (int): 340415
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: 96:5d:06:c9:c3:b2:34:0d:e3:a7:a5:24:3e:c3:d5:30:a1:6d:b8:c3
AuthorityKeyId: 81:94:35:9e:2a:a8:77:60:23:66:ec:2a:9d:6e:cf:b6:75:19:50:5d

Fingerprint (sha1): 45:33:f7:ba:2f:ce:0d:b6:dd:0b:5c:75:12:55:a6:cc:bd:c4:de:cd
Fingerprint (sha256): be:0b:3e:11:75:4d:96:1e:5f:67:0e:a1:3e:fc:f0:dd:02:41:ee:8f:19:03:a3:08:24:81:92:e8:61:03:3d:5e

Issuing Certificate URL: http://aia1.ssp-strong-id.net/CA/VAdeviceCA.p7c
Issuing Certificate URL: ldap://dir1.ssp-strong-id.net/cn=Veterans%20Affairs%20Device%20CA%20B2,ou=PKI,ou=Services,dc=va,dc=gov?cACertificate

Revocation information

OCSP Server: http://ocsp.pki.va.gov/
OCSP Server: http://ocsp1.ssp-strong-id.net/VA-SSP-CA-B2
CRL Distribution Point: http://crl.pki.va.gov/PKI/CRL/vadevice.crl
CRL Distribution Point: ldap://ldap.pki.va.gov/cn%3dSSPB2AE,cn%3dCDP,cn%3dPKI,cn%3dServices,dc%3dva,dc%3dgov?certificateRevocationList
CRL Distribution Point: http://cdp1.ssp-strong-id.net/CDP/vadevice.crl
CRL Distribution Point: ldap://dir1.ssp-strong-id.net/cn%3dVeterans%20Affairs%20Device%20CA%20B2,ou%3dPKI,ou%3dServices,dc%3dva,dc%3dgov?certificateRevocationList

Check the revocation status for the current certificate on www.netresponse.cardiocom.va.gov
2
DNS Names
1
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

netresponse.cardiocom.va.gov
www.netresponse.cardiocom.va.gov
[email protected]

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIDBTG/MA0GCSqGSIb3DQEBCwUAMHIxEzARBgoJkiaJk/Is ZAEZFgNnb3YxEjAQBgoJkiaJk/IsZAEZFgJ2YTERMA8GA1UECxMIU2VydmljZXMx DDAKBgNVBAsTA1BLSTEmMCQGA1UEAxMdVmV0ZXJhbnMgQWZmYWlycyBEZXZpY2Ug Q0EgQjIwHhcNMTUwODI3MTk0NzEzWhcNMTgwODA3MTUyMjQ2WjBmMRMwEQYKCZIm iZPyLGQBGRYDZ292MRIwEAYKCZImiZPyLGQBGRYCdmExEDAOBgNVBAsTB2Rldmlj ZXMxKTAnBgNVBAMTIHd3dy5uZXRyZXNwb25zZS5jYXJkaW9jb20udmEuZ292MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+XC9dD0KZ08+eDRLP6+MeDQ sKGO5yLDCg3w/78N2MZy6tBCxsBg3z/AN9Vpo3fwl70gFYyUjPwiOzVfFklX1qqD B1m+w+0qeyvmtDS1CjsOYV6g4HefCxvjgHkTpp7O7arTuBe7tnMyMYn51JTSLDid 1XbeEHfVCe4mYkNc1dgUvgwuYfW/UxUTm4PGBEdZiXcj2NiLkw+Do+kIXupD9WhW l9UPWfHnBcuR6d+qUJUa1HondaIFfsFI51UuSxqMDBAwrfnPJobRQBtv+YnXeDsN O27qfHLLFoRGIcXMrCxkr9YRnW+NpGOP5a94L7drGBXhEdqAk2J/pdBsf2pq8QID AQABo4IDtDCCA7AwYwYDVR0RBFwwWoEYbWF0dGhldy5pbmdlYnJhbmRAdmEuZ292 ghxuZXRyZXNwb25zZS5jYXJkaW9jb20udmEuZ292giB3d3cubmV0cmVzcG9uc2Uu Y2FyZGlvY29tLnZhLmdvdjAXBgNVHSAEEDAOMAwGCmCGSAFlAwIBAwgwggEwBggr BgEFBQcBAQSCASIwggEeMDsGCCsGAQUFBzAChi9odHRwOi8vYWlhMS5zc3Atc3Ry b25nLWlkLm5ldC9DQS9WQWRldmljZUNBLnA3YzCBgAYIKwYBBQUHMAKGdGxkYXA6 Ly9kaXIxLnNzcC1zdHJvbmctaWQubmV0L2NuPVZldGVyYW5zJTIwQWZmYWlycyUy MERldmljZSUyMENBJTIwQjIsb3U9UEtJLG91PVNlcnZpY2VzLGRjPXZhLGRjPWdv dj9jQUNlcnRpZmljYXRlMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5wa2kudmEu Z292LzA3BggrBgEFBQcwAYYraHR0cDovL29jc3AxLnNzcC1zdHJvbmctaWQubmV0 L1ZBLVNTUC1DQS1CMjAOBgNVHQ8BAf8EBAMCBaAwJwYDVR0lBCAwHgYIKwYBBQUH AwEGCCsGAQUFBwMCBghghkgBZQMGBzAfBgNVHSMEGDAWgBSBlDWeKqh3YCNm7Cqd bs+2dRlQXTCCAYEGA1UdHwSCAXgwggF0MDCgLqAshipodHRwOi8vY3JsLnBraS52 YS5nb3YvUEtJL0NSTC92YWRldmljZS5jcmwwdKByoHCGbmxkYXA6Ly9sZGFwLnBr aS52YS5nb3YvY24lM2RTU1BCMkFFLGNuJTNkQ0RQLGNuJTNkUEtJLGNuJTNkU2Vy dmljZXMsZGMlM2R2YSxkYyUzZGdvdj9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0 MDSgMqAwhi5odHRwOi8vY2RwMS5zc3Atc3Ryb25nLWlkLm5ldC9DRFAvdmFkZXZp Y2UuY3JsMIGToIGQoIGNhoGKbGRhcDovL2RpcjEuc3NwLXN0cm9uZy1pZC5uZXQv Y24lM2RWZXRlcmFucyUyMEFmZmFpcnMlMjBEZXZpY2UlMjBDQSUyMEIyLG91JTNk UEtJLG91JTNkU2VydmljZXMsZGMlM2R2YSxkYyUzZGdvdj9jZXJ0aWZpY2F0ZVJl dm9jYXRpb25MaXN0MB0GA1UdDgQWBBSWXQbJw7I0DeOnpSQ+w9UwoW24wzANBgkq hkiG9w0BAQsFAAOCAQEAFEaU85sCcJw4xxkgNPlxM5DfPLtf6tsN6nl3LgMukgJL LaOpNaGpqisqUTjTJzjRTqlemu18RedJB/LPkEkTJJySkMNld8ORmPPJIVOQqd6X g+dGaSo8sKrC0W0pLjkVqjiuRKhclT3UP3fgeDuC12S3nlydt8JheeKhFxZt+uBc nWj3bhK3wWHcP+v+1+VLpxy+n0VHoaEDTZHNvsxa3S8Q85cSeYZ7S8dcjBXDHldO GVqBAvlz2OXmDAijD8AD5N+GTZfMkX2RSSRRipq9qrEld12HXuGOSuYIo9LxnkOf SkfioBlppJBdE4Xapn9eOlAA3seK5Y30RL80GruGBg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+XC9dD0KZ08+eDRLP6+ MeDQsKGO5yLDCg3w/78N2MZy6tBCxsBg3z/AN9Vpo3fwl70gFYyUjPwiOzVfFklX 1qqDB1m+w+0qeyvmtDS1CjsOYV6g4HefCxvjgHkTpp7O7arTuBe7tnMyMYn51JTS LDid1XbeEHfVCe4mYkNc1dgUvgwuYfW/UxUTm4PGBEdZiXcj2NiLkw+Do+kIXupD 9WhWl9UPWfHnBcuR6d+qUJUa1HondaIFfsFI51UuSxqMDBAwrfnPJobRQBtv+YnX eDsNO27qfHLLFoRGIcXMrCxkr9YRnW+NpGOP5a94L7drGBXhEdqAk2J/pdBsf2pq 8QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340415 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'gov' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'va' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Veterans Affairs Device CA B2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-27 19:47:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 15:22:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'gov' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'va' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devices' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.netresponse.cardiocom.va.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31294160976244047639640022676590119832499257802941858990482509535559943522214382555276630403733065381135317573911840582519601701385245625943671476291923089948648378152839811132341484752982655161427672600385002343166840961805227159713839108297072382220350526865340772241955587462017764132119592490645479581117494413134338269990175027386488344730276682075053717394070911082066205282514949209984545581271651711558733099074785295193568037247278362975922294836402623341802567037844852928281524251087812692576817880488006454347297625774577039975296721936668403513402739371546344730927042296704615673410494182151638955485937 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netresponse.cardiocom.va.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netresponse.cardiocom.va.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.2.1.3.8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.ssp-strong-id.net/CA/VAdeviceCA.p7c' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://dir1.ssp-strong-id.net/cn=Veterans%20Affairs%20Device%20CA%20B2,ou=PKI,ou=Services,dc=va,dc=gov?cACertificate' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.va.gov/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.ssp-strong-id.net/VA-SSP-CA-B2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.6.7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8194359e2aa877602366ec2a9d6ecfb67519505d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (376 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.va.gov/PKI/CRL/vadevice.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.pki.va.gov/cn%3dSSPB2AE,cn%3dCDP,cn%3dPKI,cn%3dServices,dc%3dva,dc%3dgov?certificateRevocationList' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.ssp-strong-id.net/CDP/vadevice.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://dir1.ssp-strong-id.net/cn%3dVeterans%20Affairs%20Device%20CA%20B2,ou%3dPKI,ou%3dServices,dc%3dva,dc%3dgov?certificateRevocationList' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 965d06c9c3b2340de3a7a5243ec3d530a16db8c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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