mediaspace.ial.edu.sg

- Singapore Workforce Development Agency -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:44:52 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Singapore Workforce Development Agency

Organization: Singapore Workforce Development Agency
Locality: Singapore
Country: SG

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:44:52
Serial Number (int): 1277314130
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: cf:be:50:59:ca:37:72:28:4f:2a:33:54:88:62:ff:0d:4a:a2:a6:82
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 96:61:3a:bd:30:0c:63:8d:11:81:d7:65:92:69:32:e0:63:01:7f:0d
Fingerprint (sha256): 95:0e:da:3e:b6:a7:42:56:e3:c8:9a:78:10:55:dc:0c:6f:95:ef:7b:4e:63:0d:e9:63:7c:2f:33:8f:ae:d7:30

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate mediaspace.ial.edu.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediaspace.ial.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mediaspace.ial.edu.sg

Other certificates including the domain name ial.edu.sg

(limited to 100 certificates)
www.fmbm.info
learningatwork.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
incapsula.com
learningspace.ial.edu.sg
events.meritkahn.com
portal.ial.edu.sg
learningatwork.ial.edu.sg
events.hamedazimi.me
incapsula.com
events.saludcontech.com
events.hamedazimi.me
events.hamedazimi.me
events.gosmartvalue.com
formularios.martinic.xyz
canvas.ial.edu.sg
portal.ial.edu.sg
events.marianasworkinggroup.org
www.ial.edu.sg
www.afawaseries-tz.com
incapsula.com
events.saludcontech.com
feedback.ial.edu.sg
incapsula.com
events.marianasworkinggroup.org
myaccount.mealcard.club
ial-tms.ial.edu.sg
community.ial.edu.sg
*.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
learningatwork.ial.edu.sg
canvas.ial.edu.sg
www.ial.edu.sg
learningspace.ial.edu.sg
www.virtis.in
events.hamedazimi.me
events.workplacelearning.ial.edu.sg
incapsula.com
link.livinginthegap.org
eventos.facilitandoamamentacao.com.br
incapsula.com
webmail.suss.edu.sg
incapsula.com
events.workplacelearning.ial.edu.sg
www.ial.edu.sg
events.hamedazimi.me
www.ial.edu.sg
feedback.ial.edu.sg
learningatwork.ial.edu.sg
files.anu-biz.com
events.hamedazimi.me
uat-ial-tms.ial.edu.sg
incapsula.com
ial.edu.sg
learningspace.ial.edu.sg
community.ial.edu.sg
www.gipcgoa.com
events.meritkahn.com
incapsula.com
learningspace.ial.edu.sg
portal.ial.edu.sg
author.ial.edu.sg
incapsula.com
ial.edu.sg
webmail.suss.edu.sg
feedback.ial.edu.sg
incapsula.com
incapsula.com
events.hamedazimi.me
ial.edu.sg
www.virtis.in
uat.ial.edu.sg
incapsula.com
events.gosmartvalue.com
workplacelearning.ial.edu.sg
incapsula.com
learningatwork.ial.edu.sg
Ezekielp.ial.edu.sg
learningspace.ial.edu.sg
learningatwork.ial.edu.sg
incapsula.com
events.hamedazimi.me
ial.edu.sg
events.informasoft.ca
community.ial.edu.sg
events.marianasworkinggroup.org
events.hamedazimi.me
www.afawaseries-tz.com
ial.edu.sg
mediaspace.ial.edu.sg
webmail.suss.edu.sg
author.ial.edu.sg
incapsula.com
feedback.ial.edu.sg
www.virtis.in
events.hamedazimi.me
uat.ial.edu.sg
learningspace.ial.edu.sg

Certificate

The complete raw certificate details for mediaspace.ial.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIETCJEUjANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xNDAzMDMwNjA0MjVaFw0xODAxMjYy
MzUwMTNaMHIxCzAJBgNVBAYTAlNHMRIwEAYDVQQHEwlTaW5nYXBvcmUxLzAtBgNV
BAoTJlNpbmdhcG9yZSBXb3JrZm9yY2UgRGV2ZWxvcG1lbnQgQWdlbmN5MR4wHAYD
VQQDExVtZWRpYXNwYWNlLmlhbC5lZHUuc2cwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC78I/5gl/t7cKQN5XFfgD6sjqSiYcKJERGkBm9D/yzug9/NqfF
5FaarhgJltN6ygHCA467QaToETd2wWVe1gcRisMeW7Xw302HQsm+s3US/P23thyJ
Q3uxUaT33NVIA4Z5MV5dwoE8KNOVzSSxUWhBWvnJAtP41gk1ECy3rWZ+Q5f28iOy
FMB84lygKIEI3uiIvVclNsVsy1/e5Ea1RhyPFimG6IKd64jv9ODTfbISIdq2tDu0
wcTzIJ0rnOmwmEHEsQ/IeWp/eDZ+OmdeMSLVkz+/5YUg5V3V0KwHPYh/VhXkQj5U
H/K+2kcPnpDzjBA4601EPAyPy2TrZwYjlg5ZAgMBAAGjggGEMIIBgDALBgNVHQ8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCow
KKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxYy5jcmwwZAYIKwYB
BQUHAQEEWDBWMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAv
BggrBgEFBQcwAoYjaHR0cDovL2FpYS5lbnRydXN0Lm5ldC8yMDQ4LWwxYy5jZXIw
SgYDVR0gBEMwQTA1BgkqhkiG9n0HSwIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3
dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMCAGA1UdEQQZMBeCFW1lZGlhc3Bh
Y2UuaWFsLmVkdS5zZzAfBgNVHSMEGDAWgBQe8auJBvhJDwEzd+4Ueu4ZfJMoTTAd
BgNVHQ4EFgQUz75QWco3cihPKjNUiGL/DUqipoIwCQYDVR0TBAIwADANBgkqhkiG
9w0BAQUFAAOCAQEAZK2UMXbQEU8Tmds1AaHjCI+WaUJookQauSFO2Mo0pLuuCmbI
NGZFSO3XyFK226lKH4uwEaUIb2OAeLfkjOTDL0z1ATGsdrT7bPSdRj3luub0uXoD
2vua7chnozqvtzoXTCswTCcUqge1L7OQyek8d+wTEiFk8FFp80Fjy2hd0/Pze846
+vedeg688f8YoV+Sf/4LdjVmbn3p/vuoPY/i1lS8edZ4pwrSy5ZGZsA2e1f4ZG78
qVxSZ7nBthGNLzQH7OaEakhyDA3Sg1ytmwSUcuGqTRs6uYj8WwSoEX+OcaoEt8hV
cHBQdC//eqzfovEQehjdCcsOS5Zv1H3MdZ3UtA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/CP+YJf7e3CkDeVxX4A
+rI6komHCiRERpAZvQ/8s7oPfzanxeRWmq4YCZbTesoBwgOOu0Gk6BE3dsFlXtYH
EYrDHlu18N9Nh0LJvrN1Evz9t7YciUN7sVGk99zVSAOGeTFeXcKBPCjTlc0ksVFo
QVr5yQLT+NYJNRAst61mfkOX9vIjshTAfOJcoCiBCN7oiL1XJTbFbMtf3uRGtUYc
jxYphuiCneuI7/Tg032yEiHatrQ7tMHE8yCdK5zpsJhBxLEPyHlqf3g2fjpnXjEi
1ZM/v+WFIOVd1dCsBz2If1YV5EI+VB/yvtpHD56Q84wQOOtNRDwMj8tk62cGI5YO
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277314130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-03 06:04:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 23:50:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore Workforce Development Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediaspace.ial.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23725188769807970141926289854277281310382127723238448345866062623860530351892793335065073890866382404071715492298770919045471131127052601373506151696730971426472848452631235325671180560942733217860518471808796676539702207403453646537119255112453770938966397745626460020475936983484981767057344363379630891087250883438960166928086553534548627221749336978363119325598477593413114550372798697903940679779830887560450506742845645375431168701276061410010524600852207906718139285979260751948247640569060025409885933740128125058895058360329906857320005959178513605392198235974667520389873877064633322290941628224804071280217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaspace.ial.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfbe5059ca3772284f2a33548862ff0d4aa2a682
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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