www.laposte20projetspour2020.fr

- LA POSTE - DSI CENTRALE -

Issued by Certinomis - Easy CA

About this certificate

This digital certificate with serial number 0c:cf:d2:28:ed:12:b8:34:d4:9e:f7:e8:0a:0d:36:d0:38:40:2e:41 was issued on by Certinomis.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • SAN DNSName contains duplicate values (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

LA POSTE - DSI CENTRALE

Company registration number: 1-40705
Organization: LA POSTE - DSI CENTRALE
Organization unit: 0002 356000117
Locality: Nantes
Country: FR

Certinomis

Organization: Certinomis
Organization unit: 0002 433998903
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:cf:d2:28:ed:12:b8:34:d4:9e:f7:e8:0a:0d:36:d0:38:40:2e:41
Serial Number (int): 73142451012446492263943164261027645152018050625
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: d7:a9:ee:e0:58:ce:85:f8:d3:ec:96:d8:b6:67:ea:1f:93:b6:ac:be
AuthorityKeyId: 2c:c5:e3:20:2f:ab:0a:11:d6:f7:3a:d7:51:78:f4:6c:8f:b1:00:59

Fingerprint (sha1): 1e:13:1e:1f:4f:d9:ae:6a:35:bc:b8:b3:b3:01:05:54:e5:1a:b0:3e
Fingerprint (sha256): 88:4e:db:ed:5f:ad:76:d3:63:b2:f5:d4:f7:cb:86:bf:f8:5c:68:82:b5:54:2a:3b:cf:df:b1:07:58:7c:bf:40


Revocation information

OCSP Server: http://igc-g3.certinomis.com/INSTANCE_SHA2/ocsp/OCSP_EASY
CRL Distribution Point: http://crl.igc-g3.certinomis.com/INSTANCE_SHA2/crl/AC_EASY-crl-1.crl
CRL Distribution Point: http://www.certinomis.com/crl/acg3-EASY.crl

Check the revocation status for certificate www.laposte20projetspour2020.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.laposte20projetspour2020.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr

Other certificates including the domain name laposte20projetspour2020.fr

(limited to 100 certificates)
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
internet.extra.laposte.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
internet.extra.laposte.fr
laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
candidats.laposte20projetspour2020.fr
laposte20projetspour2020.fr
internet.extra.laposte.fr
internet.extra.laposte.fr
www.laposte20projetspour2020.fr
internet.extra.laposte.fr
candidats.laposte20projetspour2020.fr
internet.extra.laposte.fr
www.laposte20projetspour2020.fr

Certificate

The complete raw certificate details for www.laposte20projetspour2020.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBEigAwIBAgIUDM/SKO0SuDTUnvfoCg020DhALkEwDQYJKoZIhvcNAQEL
BQAwWjELMAkGA1UEBhMCRlIxEzARBgNVBAoTCkNlcnRpbm9taXMxFzAVBgNVBAsT
DjAwMDIgNDMzOTk4OTAzMR0wGwYDVQQDExRDZXJ0aW5vbWlzIC0gRWFzeSBDQTAe
Fw0xNzAxMTIxNDIwMjVaFw0xOTAxMTIxNDIwMjVaMIGuMQswCQYDVQQGEwJGUjEg
MB4GA1UEChMXTEEgUE9TVEUgLSBEU0kgQ0VOVFJBTEUxFzAVBgNVBGETDjAwMDIg
MzU2MDAwMTE3MRcwFQYDVQQLEw4wMDAyIDM1NjAwMDExNzEPMA0GA1UEBxMGTmFu
dGVzMSgwJgYDVQQDEx93d3cubGFwb3N0ZTIwcHJvamV0c3BvdXIyMDIwLmZyMRAw
DgYDVQQFEwcxLTQwNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
zbRyUbp+jMb+guZt/pvbDwlsaX4TcA7pXD3f0abezZtn437C1lmmbg0wQIDyjTB+
GjpL6Y9JhjiwqSQ8NhpEbRiUdKK10cYeXY/lKEmwkXyN56hCIuNnu5gKTttKQf9h
EHumYbplvbbDfa31vnd2EFwJUeiCQJbQo7dsHaENoC251L/OOwrv2skHnRD6gztB
NIMGJqepruge87dYQEQieLi8pg3XOf9wM34rb9OqTBzram8lt9HsGdIKKdhZB5Bo
IoAh8eFhMR1tXUVBDMGqqXyRTxYaG1R7KB/odDnCRtsE7K32W8sq3S48C4W6xYxS
HYEyM1yEyUPxloLm3Jh0fwIDAQABo4IBxzCCAcMwDgYDVR0PAQH/BAQDAgWgMFUG
CCsGAQUFBwEBBEkwRzBFBggrBgEFBQcwAYY5aHR0cDovL2lnYy1nMy5jZXJ0aW5v
bWlzLmNvbS9JTlNUQU5DRV9TSEEyL29jc3AvT0NTUF9FQVNZMB8GA1UdIwQYMBaA
FCzF4yAvqwoR1vc611F49GyPsQBZMAkGA1UdEwQCMAAwFwYDVR0gBBAwDjAMBgoq
gXoBVgIDATwBMIGJBgNVHR8EgYEwfzBKoEigRoZEaHR0cDovL2NybC5pZ2MtZzMu
Y2VydGlub21pcy5jb20vSU5TVEFOQ0VfU0hBMi9jcmwvQUNfRUFTWS1jcmwtMS5j
cmwwMaAvoC2GK2h0dHA6Ly93d3cuY2VydGlub21pcy5jb20vY3JsL2FjZzMtRUFT
WS5jcmwwSwYDVR0RBEQwQoIfd3d3LmxhcG9zdGUyMHByb2pldHNwb3VyMjAyMC5m
coIfd3d3LmxhcG9zdGUyMHByb2pldHNwb3VyMjAyMC5mcjAdBgNVHQ4EFgQU16nu
4FjOhfjT7JbYtmfqH5O2rL4wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MA0GCSqGSIb3DQEBCwUAA4ICAQA80k/mx97C49f5E/rtZ7mtFHbvYrH30FKWNGmG
CZuYdUZX9m7iGd+VJyKToAVgkDigjU0VIGzDo1bcaAn4Qqmx7c3sF14/G0hfiVV5
71zdvNNgsy/2c6+tWh3PxKrzb38zmS44HaEcq3tlU+gGf5NUI7KK+u+nnEttNAtu
dHIFve0/8+or4cFCboxCXkKPR1FosXVOPwuo8oEPVFrgnmXWgPbLtQNo4ozMTbt+
3xkdQMuMcH8H2lfl6rCseDuvL4gjwBaFhnIGBPPcHIO3ZDRWktYbKq88zpXsoWUZ
mutHw3GHZbtXBoqy3ShkiKLOhBbfojRKjStpPfAxHt7nCPDvrp7MGp0SNjmGeLLw
/sHpLGdaPh71KCrgoiGuY/diuISIea/o+vXTcnRHUjRmLLxs2yE64e4XXHBbe3II
SDHXG4mZWt7RGgoGO3p3L4nhcOKEkxCA7WX/hwX7Vqr6rQI18E1nggtuvQvljIOG
u+sMq/2mgizzaZ/0T+NZIIKNsgStBNMEKKSzPu+JBUVFoZh4THDcp/K9BVHaaR7O
BLBYzy7dXJQEQRrPZo8q9bPJepoE/p1f16/cmIgtUnpIomKpiE5hBqYFDInlFV3H
fDu3G1oshb0ml7YfoitoyUwBhpG/9AufWu6y0SbETH75E79IaoMCHAC3ZY66Li3t
Aol/cw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbRyUbp+jMb+guZt/pvb
DwlsaX4TcA7pXD3f0abezZtn437C1lmmbg0wQIDyjTB+GjpL6Y9JhjiwqSQ8NhpE
bRiUdKK10cYeXY/lKEmwkXyN56hCIuNnu5gKTttKQf9hEHumYbplvbbDfa31vnd2
EFwJUeiCQJbQo7dsHaENoC251L/OOwrv2skHnRD6gztBNIMGJqepruge87dYQEQi
eLi8pg3XOf9wM34rb9OqTBzram8lt9HsGdIKKdhZB5BoIoAh8eFhMR1tXUVBDMGq
qXyRTxYaG1R7KB/odDnCRtsE7K32W8sq3S48C4W6xYxSHYEyM1yEyUPxloLm3Jh0
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73142451012446492263943164261027645152018050625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certinomis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 433998903'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certinomis - Easy CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 14:20:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 14:20:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LA POSTE - DSI CENTRALE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 356000117'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 356000117'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nantes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.laposte20projetspour2020.fr'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1-40705'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25967834032956329173061375199613431519065183066403126039770400572611995917335405551634044339661509739914195581423690680727945851100261169792017650548637692667217912659552228969467436840679165777097323661995096022184846291895022370774632655529337390932171304872018429574812482832404544411261858348611272602227716107401532104100469426264265447402474040863321954107658743479388118053847553859051927437284839244136335021732236722168303851291969729690011659108601158758737340032022989269906929905694834366970833675582899088174604989039601463799072547643317947922316621411541039106387435166964104632779568727777218861233279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://igc-g3.certinomis.com/INSTANCE_SHA2/ocsp/OCSP_EASY'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2cc5e3202fab0a11d6f73ad75178f46c8fb10059
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.250.1.86.2.3.1.60.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.igc-g3.certinomis.com/INSTANCE_SHA2/crl/AC_EASY-crl-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certinomis.com/crl/acg3-EASY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laposte20projetspour2020.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laposte20projetspour2020.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7a9eee058ce85f8d3ec96d8b667ea1f93b6acbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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