faq.avocat.fr

- CONSEIL NATIONAL DES BARREAUX -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 53:ac:18:9c:2e:ea:42:7f:5e:8c:e5:b0 was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CONSEIL NATIONAL DES BARREAUX

Organization: CONSEIL NATIONAL DES BARREAUX
State / Province: PARIS
Locality: PARIS
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 53:ac:18:9c:2e:ea:42:7f:5e:8c:e5:b0
Serial Number (int): 25895307274013608877491021232
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 5f:54:e0:8f:34:f1:4c:4d:e7:84:84:fe:87:c2:2c:b9:4c:e2:43:47
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e7:0f:10:c2:26:3c:55:f6:d8:cb:37:38:84:db:8b:0b:e0:fb:b6:f8
Fingerprint (sha256): 95:70:41:2a:2d:6f:0d:b9:be:e3:15:9b:6f:99:d9:8c:14:76:a9:e8:f1:72:d8:ab:b0:89:1c:5f:d7:2d:42:b2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate faq.avocat.fr

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faq.avocat.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

faq.avocat.fr
blogavocat.fr
mediateur-consommation-avocat.fr
ebarreau.fr
owncloud.cnb.avocat.fr
stats.avocat.fr
cnma.avocat.fr
yourls.cnb.avocat.fr

Other certificates including the domain name faq.avocat.fr

(limited to 100 certificates)
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr
faq.avocat.fr

Certificate

The complete raw certificate details for faq.avocat.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIMU6wYnC7qQn9ejOWwMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzAyMjgxMzI2MDJaFw0y
NDAzMzExMzI2MDFaMG0xCzAJBgNVBAYTAkZSMQ4wDAYDVQQIEwVQQVJJUzEOMAwG
A1UEBxMFUEFSSVMxJjAkBgNVBAoTHUNPTlNFSUwgTkFUSU9OQUwgREVTIEJBUlJF
QVVYMRYwFAYDVQQDEw1mYXEuYXZvY2F0LmZyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA65QGixso5MH/m/GtEOTD7RbCOs6iSAYMFFbXRr2k9kkFn+gN
SGZMlFMQMq7PAYWreo25Jjz9JIzqWTPFZQzd7XVJL83RrP7nCVs6Hr9BfaMVnUu7
u+EOrkKKC+1qE0RAYV9v4U4TXAAnuU8CtA3pQyDxXvAJHHJV++daSR5UrcvX8ZF7
U69ZOOguFe0hvLT5gfmhv6jaxM0BvWef46hVLE8vfdJOqkafB2btWOMbxlLbJBor
QrHEvoO4oaZrzpsoA3m/AadLkde02KzYkLMxNFbsVvGGT2aWgIbogkCjpH9sgAUQ
0Q4mo4g6pc/Zo/16kbZ/EAt3brQdAOrr6LR4NQIDAQABo4ID0zCCA88wDgYDVR0P
AQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8v
c2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNy
dDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2Fv
dnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIB
FiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwB
AgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmdsb2Jh
bHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMIGnBgNVHREEgZ8wgZyCDWZh
cS5hdm9jYXQuZnKCDWJsb2dhdm9jYXQuZnKCIG1lZGlhdGV1ci1jb25zb21tYXRp
b24tYXZvY2F0LmZyggtlYmFycmVhdS5mcoIWb3duY2xvdWQuY25iLmF2b2NhdC5m
coIPc3RhdHMuYXZvY2F0LmZygg5jbm1hLmF2b2NhdC5mcoIUeW91cmxzLmNuYi5h
dm9jYXQuZnIwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQY
MBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBRfVOCPNPFMTeeEhP6H
wiy5TOJDRzCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUAc9meiRtMlnigIH1H
neayxhzQUV5xGSqMa4AQesF3crUAAAGGmDOwdAAABAMARjBEAiAIQBtRWqR85S1T
/iR8Y9EdqKtiB/lRnCKaPY6WCs9hHAIgLcilH6hfyIKhK9Q/ItExG4xTSpluuT9L
9lOLSTCKpAIAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYaY
M7BiAAAEAwBIMEYCIQDY/stRssqer2IAQFp7PqBtCRhnR3akxRJErbNJJwEkHQIh
ALB4gfqvmsaCSx0ZjDeSHuKa25/PlPha+k/4QfDZAEGUAHUAdv+IPwq2+5VRwmHM
9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGGmDOwkQAABAMARjBEAiBqJdbPF1YgpYN7
F1Kd6zIDX/cEciDjZ1Y4IAriduH1jQIgVuvh8enJoKi7Vb61Y18l7aTg7FZw4bHw
JbFqsCFjaSUwDQYJKoZIhvcNAQELBQADggEBAD/QSWRvdqyl+JpMYuNof+qroBOO
bwML/VbdFI/Ed4k6+ECrGah66UZ9obCGNLeSsaPaTa9qlNa7J0u9+zGif9vPYQGh
WHbyhTe25vMtTiOQ9mwgCCohmUxeL4OzuzE95G9h26DJmIBvzPSIQqfXV4UUW2Xe
2kv65RbFbH5kuOXNujyg7mP/E6V/u6BL2c7S/jjIl+tTzbVayepWQsOO7r6FwA0Z
MztaZfcLzGz4mjfurj0Y4HaelwZxveeTkNhcKV92PfojBVjlFR59oDsTYp/G6dEK
Vk/XleIf88hu6ded+jM14bU36azNhXLiIQV7rmFZ+ikOME/1OB0ntOJ4bK0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65QGixso5MH/m/GtEOTD
7RbCOs6iSAYMFFbXRr2k9kkFn+gNSGZMlFMQMq7PAYWreo25Jjz9JIzqWTPFZQzd
7XVJL83RrP7nCVs6Hr9BfaMVnUu7u+EOrkKKC+1qE0RAYV9v4U4TXAAnuU8CtA3p
QyDxXvAJHHJV++daSR5UrcvX8ZF7U69ZOOguFe0hvLT5gfmhv6jaxM0BvWef46hV
LE8vfdJOqkafB2btWOMbxlLbJBorQrHEvoO4oaZrzpsoA3m/AadLkde02KzYkLMx
NFbsVvGGT2aWgIbogkCjpH9sgAUQ0Q4mo4g6pc/Zo/16kbZ/EAt3brQdAOrr6LR4
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25895307274013608877491021232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 13:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 13:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CONSEIL NATIONAL DES BARREAUX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faq.avocat.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29738995791232680548858008453528300561538115695359129391158891122097265285589265854401050851726593022799578751170866603169142685090634184834565552038451520896915676318247347121927453368699884877555936548279461670101805692884782414855220726964007770028368959757554565326578786741099980934629434495286885189809003154897759265026786361139363616541644642245421121784489109744509553410297027919990554126434068745635847937521297767737416655258131375014399567097344983764985601222187148133085825700754875721047540671533836886060376874381611980044668111556556849948146690487042471794515496858800389213342040773357114970372149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.avocat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogavocat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediateur-consommation-avocat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebarreau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owncloud.cnb.avocat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.avocat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnma.avocat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourls.cnb.avocat.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f54e08f34f14c4de78484fe87c22cb94ce24347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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