www.aktubinsk.kz

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 31:35:d4:4e:12:76:7c:8d:de:a9:b9:bb was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aktubinsk.kz,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 31:35:d4:4e:12:76:7c:8d:de:a9:b9:bb
Serial Number (int): 15229841131556277516606486971
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 99:c0:f9:49:ab:30:5e:3f:20:0c:69:9d:30:c9:bf:19:3b:aa:df:5b
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 09:f3:8b:73:d4:84:bb:34:fc:52:47:49:d5:1f:b4:af:40:2e:d8:dc
Fingerprint (sha256): 89:10:b2:82:b4:2f:a6:46:93:92:86:c6:b6:4b:3b:51:6b:e3:97:d1:ca:3c:3f:1f:b5:76:23:6b:02:f3:34:37

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.aktubinsk.kz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aktubinsk.kz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aktubinsk.kz
aktubinsk.kz

Other certificates including the domain name aktubinsk.kz

(limited to 100 certificates)
promo.aktubinsk.kz
aktubinsk.kz
aktubinsk.kz
aktubinsk.kz
aktubinsk.kz
aktubinsk.kz
www.aktubinsk.kz
aktubinsk.kz
www.aktubinsk.kz
aktubinsk.kz
aktubinsk.kz
aktubinsk.kz
aktubinsk.kz

Certificate

The complete raw certificate details for www.aktubinsk.kz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH/jCCBuagAwIBAgIMMTXUThJ2fI3eqbm7MA0GCSqGSIb3DQEBCwUAMGAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H
bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN
MTcwODA1MDcwMjI5WhcNMTgwODA2MDcwMjI5WjA+MSEwHwYDVQQLExhEb21haW4g
Q29udHJvbCBWYWxpZGF0ZWQxGTAXBgNVBAMTEHd3dy5ha3R1Ymluc2sua3owggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDWQYCB68qaNI7VhiVzkh8ixDtN
SC1eAdEQU0zwg1xD1LaVDWmOnG0jkYSb5FkB39Efc3zIqX/jrOHLP/ATrOW8E85Z
1Nnxs6ipEAFV6pm4QvisLZ1jeaI7hsJTznzVpMDMs6fQ5Yj7ZuIhjXDqAszEjX/9
HulRjBHtpIlrEBkQ1VLqSzcmLaXMteRA+Y/9VBYpzzE80fq5bkOy1Wsbtff3lD5U
y918ezOTRVj+cCiw4AmjtiFXjwmlLwue2dYdJOObgMLzxl37rnfWxTZ8x2u9Tcuy
K5OjK5g/O1tq8v3uX/NX/9Xeue+Xtdd0pUI4tZ4qdzq4Mt850Xff+abekWj5EaMk
CVGPVEMlkDmzFoPlL8Km5SVKXLdITOir98O/VxQMYClX/bT4X3kiy1aVghkoojrY
OOutc3tzkSZ4pakPzBU9XXoonSYQ5eENFUOGPx8XR2gPZxNvGsHFDTnFGChQ5jPA
ZbDbH10xg2WDG3CsSqtSnCpitbJA8Vc5MLQoMiHo80vMNR8prnS0Pq3eErBcSbg4
N1+0fd73lXPAHXSm41C0qIi2boNNkev2dowh3QRbE1o5AloZGDoOOOyFGE04e9Rx
p45W2uEErtglBWE9QB5bzJvE4T8PJTcW7lwcLnwPISQ4/s2PZ0qCxmoFOZYLl2KJ
jg9wYQrR8DnGo358oQIDAQABo4ID2DCCA9QwDgYDVR0PAQH/BAQDAgWgMIGUBggr
BgEFBQcBAQSBhzCBhDBHBggrBgEFBQcwAoY7aHR0cDovL3NlY3VyZS5nbG9iYWxz
aWduLmNvbS9jYWNlcnQvZ3Nkb21haW52YWxzaGEyZzJyMS5jcnQwOQYIKwYBBQUH
MAGGLWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2RvbWFpbnZhbHNoYTJn
MjBWBgNVHSAETzBNMEEGCSsGAQQBoDIBCjA0MDIGCCsGAQUFBwIBFiZodHRwczov
L3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwCQYDVR0T
BAIwADBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29t
L2dzL2dzZG9tYWludmFsc2hhMmcyLmNybDApBgNVHREEIjAgghB3d3cuYWt0dWJp
bnNrLmt6ggxha3R1Ymluc2sua3owHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB0GA1UdDgQWBBSZwPlJqzBePyAMaZ0wyb8ZO6rfWzAfBgNVHSMEGDAWgBTq
TnzUgC3lFYGGJoyCbcCYpM+XDzCCAfcGCisGAQQB1nkCBAIEggHnBIIB4wHhAHYA
VhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFdsTPUqAAABAMARzBF
AiBtwDxSBY+tzom5bsinZPKuIoPEyghPXZR+E7Fm8mJQnAIhAP30jq3dHzLVF27/
+JnncFmwoDXkOP13TJQ+LlZws6Y1AHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4
43fNDsgN3BAAAAFdsTPXyAAABAMARzBFAiBsvNkgJ9yk4BpUoWbMcxDWnGniZ8nc
AwVQl4s40hnNZQIhAKDaiPbhNFTxc4Je+2iBKeVPMN+QoPT41wFPDzcOhT++AHcA
u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFdsTPZEgAABAMASDBG
AiEA76rhJX5dxp8nwLwiSwNIBQCUywqW14TmC6vfqFqFaO0CIQCoKna3wZCA3Uc9
gYzL0VNIU0fe6Xb1LWE45iE/PXH+PAB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLY
gwDEe4l6qP3LAAABXbEz2xIAAAQDAEcwRQIgWHSYjrvsYGGQ5wYeqvqTeyfOdy/c
jepVP2IgZX91sWUCIQC0rx8A+FUeAw7sYAyOj9AYzY7pG3Fv/AAV/+oRmd2IrTAN
BgkqhkiG9w0BAQsFAAOCAQEAeD0yZ3rFKq22ARrsXyWHoeWzH63mfa2NsnfMTFU6
2jdtaebumgO14Z6DywL+749gLJgW81yX+cTID0+VZeERW1syyU4QAN2+Fb+1/O+e
817dyg0RohMB0+nenYthkgCDtOmzGRtRziEcV36Td1touyN3IfR0ybqAcOyzgFY0
5e5G+1FApQW+Ej9y9CN/8dJHEJYyXY1IinXIQOZp0MF1Dycf4ZQaWer0nSr26crj
8jipFywHYneaHTss1QCEeQ6m1wZ9Ptd3q856vlRMWGc4FaBiREdB2yjA8e9V3DCE
o2+SXGmXsMT0t33Gel1E8zOjV62naR+2fggj06pLgNPlFA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1kGAgevKmjSO1YYlc5If
IsQ7TUgtXgHREFNM8INcQ9S2lQ1pjpxtI5GEm+RZAd/RH3N8yKl/46zhyz/wE6zl
vBPOWdTZ8bOoqRABVeqZuEL4rC2dY3miO4bCU8581aTAzLOn0OWI+2biIY1w6gLM
xI1//R7pUYwR7aSJaxAZENVS6ks3Ji2lzLXkQPmP/VQWKc8xPNH6uW5DstVrG7X3
95Q+VMvdfHszk0VY/nAosOAJo7YhV48JpS8LntnWHSTjm4DC88Zd+6531sU2fMdr
vU3LsiuToyuYPztbavL97l/zV//V3rnvl7XXdKVCOLWeKnc6uDLfOdF33/mm3pFo
+RGjJAlRj1RDJZA5sxaD5S/CpuUlSly3SEzoq/fDv1cUDGApV/20+F95IstWlYIZ
KKI62DjrrXN7c5EmeKWpD8wVPV16KJ0mEOXhDRVDhj8fF0doD2cTbxrBxQ05xRgo
UOYzwGWw2x9dMYNlgxtwrEqrUpwqYrWyQPFXOTC0KDIh6PNLzDUfKa50tD6t3hKw
XEm4ODdftH3e95VzwB10puNQtKiItm6DTZHr9naMId0EWxNaOQJaGRg6DjjshRhN
OHvUcaeOVtrhBK7YJQVhPUAeW8ybxOE/DyU3Fu5cHC58DyEkOP7Nj2dKgsZqBTmW
C5diiY4PcGEK0fA5xqN+fKECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15229841131556277516606486971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-05 07:02:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 07:02:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aktubinsk.kz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874087677330123423252310487862294863463394192613579702195734161120616940112873972814575550836443240680013833302121792796136893002570384335318242473526065087687826989306204543632922843141585320510563850827609534384036900872332858393973273562663152471366715488038134989122286088850080113281442258504392597233852131061040071415567339835967830660477749417346002562669946733662086435181744303697160963487908604277749223615263173823372126383296833240803840674832841628099713266646646832270769155420255347374275297131736384477129635292060556798219597395226254540935376507902517892853439149219071055994178482659642640793531154428269196971206242433863112242121279660193339249557391354784351694554561902040143869133572575563707959486566968408945403277106875436822723962615501563131389620627119565515218784519123680152812933988419959502220262536748165606242746498242197645467863518043759511750178007622610332368887821528057113807511657220549272425242602445095352626746743745591068255571310730329008426300197183941495512853184321687300632030486317667944310214305223004402395383853484226169359452317511694498076942344613470143648384412074249990443088298282960094209981530440045517526078205944479409285697523421515722932337984051200669979590425761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aktubinsk.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktubinsk.kz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99c0f949ab305e3f200c699d30c9bf193baadf5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00783d32677ac52aadb6011aec5f2587a1e5b31fade67dad8db277cc4c553ada376d69e6ee9a03b5e19e83cb02feef8f602c9816f35c97f9c4c80f4f9565e1115b5b32c94e1000ddbe15bfb5fcef9ef35eddca0d11a21301d3e9de9d8b61920083b4e9b3191b51ce211c577e93775b68bb237721f474c9ba8070ecb3805634e5ee46fb5140a505be123f72f4237ff1d2471096325d8d488a75c840e669d0c1750f271fe1941a59eaf49d2af6e9cae3f238a9172c0762779a1d3b2cd50084790ea6d7067d3ed777abce7abe544c58673815a062444741db28c0f1ef55dc3084a36f925c6997b0c4f4b77dc67a5d44f333a357ada7691fb67e0823d3aa4b80d3e514