*.byramhealthcare.com

- Byram Healthcare Centers Inc -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 0b:ee:4e:9b:eb:6c:a8:51:09:6f:77:82:f8:bf:0c:34 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Byram Healthcare Centers Inc

Organization: Byram Healthcare Centers Inc
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:ee:4e:9b:eb:6c:a8:51:09:6f:77:82:f8:bf:0c:34
Serial Number (int): 15858868987139974267767287319571139636
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5e:60:29:f7:23:ab:7a:cf:d5:7a:33:a1:15:49:b5:46:c6:cb:3f:49
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): c8:24:ab:8d:06:2f:29:aa:83:cf:85:76:a5:b0:e0:81:7c:dd:6c:67
Fingerprint (sha256): 97:0f:f5:58:bf:70:d0:4d:bd:85:c2:db:de:69:cb:79:21:d9:33:a8:b6:36:2d:d8:ff:11:e1:92:4a:d3:fa:43

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-2011b.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2011b.crl

Check the revocation status for certificate *.byramhealthcare.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.byramhealthcare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sophosmail.byramhealthcare.com
sophosmail01.byramhealthcare.com
sophosmail02.byramhealthcare.com
byramhealthcare.com
*.byramhealthcare.com

Other certificates including the domain name byramhealthcare.com

(limited to 100 certificates)
*.byramhealthcare.com
vnsdl.byramhealthcare.com
scalix.byramhealthcare.com
*.byramhealthcare.com
sts.byramhealthcare.com
mbyrlyncedge.byramhealthcare.com
www.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
outlook.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
www.byramhealthcare.com
zimbra.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
voltage-pp-0000.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
breastpumps.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
BYRAM-EXPC1-P.byramhealthcare.com
BYRAM-EXPE1-P.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
mbyrlyncedge.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
secureit.byramhealthcare.com
*.byramhealthcare.com
mbyrfewebext.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
sts.byramhealthcare.com
*.byramhealthcare.com
enroll.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
vnsdl.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com

Certificate

The complete raw certificate details for *.byramhealthcare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMQA/IkX1oH9UD6cpY7X
w9DhhyXrvF+m/Lq3eXHMF4FBNxzsK4t1cvLRNmKF4hAq8UoMQ20kMpSctK+d+zfy
S1Gf2BfZaGyo6g7A24vkPJceH+UIe4vYj/AJcK21aP/bMSiSv4rdGKhmS3FXQ60u
vCFSnTH+sfv2+y5SxraNzayrMFGkWdD71yuI0aQw6x1FX4kywYW6tlSCgPDNDqY3
KtNiyV+Z5gkt+TzP1ZIqUnDSUJ2bOFfu4+ufeVxq0bXW0soaMKSG+zu52UdtY0/8
gwlSclM6+zHpqWS3qndylmcTJAYZHbRFAxyPPAVCFuAZ6b3vVp9FY6obLNyCalqC
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15858868987139974267767287319571139636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Byram Healthcare Centers Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.byramhealthcare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20799735116848823350477058916596598701707076086304308776825525807088922002092331684168533004106573190716142997848725194125798652596334158609611398389586565102962589434389292880764651238095874559048569502638357039675911804058606484054589434505110544791169112675678741346801582955854214664588486943041280273244639526385893697280082495320958578976497894952074022290453280968423830228058997271856790747126648101280364728343675059591510760683546053183491236806807582633874591247821104210246230039218113775813252777620467937475920637734082261321126785759889656907806956086557733639609784922631809905643823258643093958329001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e6029f723ab7acfd57a33a11549b546c6cb3f49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophosmail.byramhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophosmail01.byramhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophosmail02.byramhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byramhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byramhealthcare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2011b.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2011b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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