*.soundud.com

- YAMAHA Corporation -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 56:23:8f:e6:cb:f7:37:d4:00:00:00:00:58:08:ea:42 was issued on by AffirmTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

YAMAHA Corporation

Organization: YAMAHA Corporation
State / Province: Shizuoka
Locality: Hamamatsu-shi
Country: JP

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 56:23:8f:e6:cb:f7:37:d4:00:00:00:00:58:08:ea:42
Serial Number (int): 114498256697726509818438409343346469442
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8c:31:9c:49:7c:9e:06:c4:64:fd:28:b1:ca:53:31:8f:ec:93:32:e1
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 9f:dd:73:da:04:87:da:03:d7:3c:8e:d2:ed:c3:01:ca:6f:f1:9f:b5
Fingerprint (sha256): 91:66:0e:aa:62:46:ba:8e:25:8a:81:dc:54:07:e6:b5:5d:94:12:b8:94:ec:21:75:50:2d:0a:80:6d:25:c4:42

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate *.soundud.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.soundud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.soundud.com
soundud.com

Other certificates including the domain name soundud.com

(limited to 100 certificates)
service.soundud.com
link.rc.soundud.com
*.dev.caption.soundud.com
*.soundud.com
*.multi-caption.soundud.com
www.losparketos.cz
*.caption.soundud.com
*.multi-caption-dev-nict.soundud.com
service.soundud.com
*.multi-caption-dev-nict.soundud.com
link.rc.soundud.com
service.soundud.com
service.soundud.com
pankajgaikar.com
whos-that-pokemon.es
*.caption.soundud.com
intranet.lrusso.com
service.soundud.com
www.apricot-model.xyz
*.caption.soundud.com
www.andamp.at
service.soundud.com
service.soundud.com
*.caption.soundud.com
eupayments.world
*.dev.caption.soundud.com
*.multi-caption.soundud.com
shopirai.com
*.multi-caption.soundud.com
*.multi-caption.soundud.com
*.soundud.com
*.caption.soundud.com
www.apricot-model.xyz
service.soundud.com
*.soundud.com
*.caption.soundud.com
*.dev.caption.soundud.com
link.notiva.dk
*.soundud.com
*.dev.caption.soundud.com
*.caption.soundud.com
go.soundud.com
kingchiller.com
*.soundud.com
*.soundud.com

Certificate

The complete raw certificate details for *.soundud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgIQViOP5sv3N9QAAAAAWAjqQjANBgkqhkiG9w0BAQsFADCB
gjELMAkGA1UEBhMCQ0ExFDASBgNVBAoTC0FmZmlybVRydXN0MSswKQYDVQQLEyJT
ZWUgd3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MTAwLgYDVQQDEydBZmZp
cm1UcnVzdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBPVjEwHhcNMTkwNTE1MDIz
MDIwWhcNMjAwNjA3MDMwMDE3WjBtMQswCQYDVQQGEwJKUDERMA8GA1UECBMIU2hp
enVva2ExFjAUBgNVBAcTDUhhbWFtYXRzdS1zaGkxGzAZBgNVBAoTEllBTUFIQSBD
b3Jwb3JhdGlvbjEWMBQGA1UEAwwNKi5zb3VuZHVkLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANHgb41MNcC2TdwqrJBqnTKHrKxHcqmsvT/di6w+
FFF4GdNAMIHiw+1ZJYl1a3WhHkDgfLcR2URqolG8Z8GbZo7wve3zw9kVY29mBvr1
huNx8+KrgOGm+9yWOm/hO/7HmcsOswHQMP9vnisUW7OkyMKBpBe0dhCaADYvajZr
ukoUDknvtGpwHYUTjnRS79LFtKMsY0nw2uUP3P9PyQgzvICY+smhx6tVfDjuaalD
IgAj+QHW2ccidQOz1AbbMy0l7j3443avkNok1wfbLjQv6czQDdz14boVb54OMDQZ
V5Mre948u9QoniXyjOrx4xCtRBZQMeg/LU92blcEth4vY5cCAwEAAaOCAyswggMn
MCUGA1UdEQQeMByCDSouc291bmR1ZC5jb22CC3NvdW5kdWQuY29tMIIBfQYKKwYB
BAHWeQIEAgSCAW0EggFpAWcAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/
XqCDDwAAAWq5bwLtAAAEAwBHMEUCIQDEdevHw699kLegVV1C5yb9pcRyEm8H8UrG
bC2SLUuA9QIga1BEXfXMWGJl5Xn2aajMKl7W8gIJsfIdIFJL1OBDDm0AdgBVgdTC
FpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWq5bwL0AAAEAwBHMEUCIFND
9BtPgyiO6ODbJ2C992omSdeyN1FFP4qFagTSkqY2AiEAi/ZCmQBA6JpxcerNhxhO
8AVPnBbj0QGDyJUVECEf3XMAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O
yA3cEAAAAWq5bwLnAAAEAwBGMEQCIAZe1+f2Wp/eaQ9tvcU1ApUAzw9MTy1DcyL8
VYNclP7QAiAX8M3s39Eafd2OoSOL+Jez5+1OEPwOMapCfrOYYPwmQjAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAkGA1UdEwQC
MAAwbAYIKwYBBQUHAQEEYDBeMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcC5hZmZp
cm10cnVzdC5jb20wMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuYWZmaXJtdHJ1c3Qu
Y29tL2FmdG92MWNhLmNydDBXBgNVHSAEUDBOMEIGCisGAQQBgo8JAgUwNDAyBggr
BgEFBQcCARYmaHR0cHM6Ly93d3cuYWZmaXJtdHJ1c3QuY29tL3JlcG9zaXRvcnkw
CAYGZ4EMAQICMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuYWZmaXJtdHJ1
c3QuY29tL2NybC9hZnRvdjFjYS5jcmwwHwYDVR0jBBgwFoAU/mDDDaSinSFPenhM
YsXbFPw5eMQwHQYDVR0OBBYEFIwxnEl8ngbEZP0oscpTMY/skzLhMA0GCSqGSIb3
DQEBCwUAA4IBAQCxPsrNtcS34lC3BqhRgKc2WGpALvDavvS2WAEsvGNTFkTbrKiG
ebZciaa/cFbPvtZHFRT6RRfBR45uAGL8276/Zo8hooEiYdrYn0RRp9pGWw2S+5eF
C7NfazaazWmkRxvoiC6Loh6Pwur8WRVpN5KywmHiKx+uuMUfhpGDiCkXl+7QPd05
JYxjw+b5gjSuEZNYDSBViyX7V31Ee67LIP7BLxjCGf4NzYTj5WYgTtIpFhPq91uw
qhh+0HnjGeZ1MiXH2CLbJDKF/hDDQo4+Rz6a+V4IDwdxgpx7rAIMPFgXzOj6MKZb
zs13YD7XreqoczW5cWwDDai4o/FLIAPrNzpN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eBvjUw1wLZN3CqskGqd
MoesrEdyqay9P92LrD4UUXgZ00AwgeLD7VkliXVrdaEeQOB8txHZRGqiUbxnwZtm
jvC97fPD2RVjb2YG+vWG43Hz4quA4ab73JY6b+E7/seZyw6zAdAw/2+eKxRbs6TI
woGkF7R2EJoANi9qNmu6ShQOSe+0anAdhROOdFLv0sW0oyxjSfDa5Q/c/0/JCDO8
gJj6yaHHq1V8OO5pqUMiACP5AdbZxyJ1A7PUBtszLSXuPfjjdq+Q2iTXB9suNC/p
zNAN3PXhuhVvng4wNBlXkyt73jy71CieJfKM6vHjEK1EFlAx6D8tT3ZuVwS2Hi9j
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114498256697726509818438409343346469442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 02:30:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 03:00:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shizuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamamatsu-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'YAMAHA Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.soundud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26494479130977469107091995052698579644380354535607249496257423917444415636346009169674313637103442420849859339733078186139904584680837427373391551039839520784772719767820712260132977204512616526610386544662087758717674299206520438069772427419489229974794110689499235850400500255933413038349293807158767484241219461690841587216992583994164560903430559374143602694959376854621159089652789081601587529260209303007862205778064329498711439905230807017953873926310149337014260410974125722181774211671701382627999775855878712982935739147670439929202424701300130791790084715291584287528400652344186731100609801374654673150871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c319c497c9e06c464fd28b1ca53318fec9332e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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