*.linkintime.co.in
- LINK INTIME INDIA PRIVATE LIMITED -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 41:77:e9:da:42:d4:39:9c:a0:67:53:3e was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
LINK INTIME INDIA PRIVATE LIMITED
Organization:
LINK INTIME INDIA PRIVATE LIMITED
State / Province:
Maharashtra
Locality: Mumbai
Country: IN
Locality: Mumbai
Country: IN
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 41:77:e9:da:42:d4:39:9c:a0:67:53:3eSerial Number (int): 20261492148517824281352557374
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 35:de:31:fa:4e:10:97:ac:37:9a:1e:92:e8:a2:60:b3:d1:20:5d:d7
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): b8:be:26:bd:a8:03:4d:eb:3a:5a:60:56:84:33:b5:66:03:5b:38:3f
Fingerprint (sha256): 9e:5f:6b:e8:0e:cc:ae:dd:b9:f5:64:6f:ae:a3:7f:9a:b5:ed:50:b1:8a:2b:1e:5b:44:ad:b9:8c:32:4a:53:66
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate *.linkintime.co.in
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.linkintime.co.in
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.linkintime.co.in
linkintime.co.in
linkintime.co.in
Other certificates including the domain name linkintime.co.in
(limited to 100 certificates)
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
mail.linkintime.co.in
*.linkintime.co.in
ithelpdesk.tatanexarc.com
servicedesk.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
www.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
servicedesk.kushals.com
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
empower.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
helpdesk.dobby.co.in
*.linkintime.co.in
sanithelpdesk.sansera.in
servicedesk.linkintime.co.in
*.linkintime.co.in
mail.linkintime.co.in
mail.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
mail.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
apps.linkintime.co.in
*.linkintime.co.in
helpdesk.alqimi.com
sanithelpdesk.sansera.in
instavote.linkintime.co.in
*.linkintime.co.in
helpdesk.alqimi.com
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
apps.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
apps.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
ithelpdesk.tatanexarc.com
*.linkintime.co.in
*.linkintime.co.in
mail.linkintime.co.in
*.linkintime.co.in
ithelpdesk.tatanexarc.com
servicedesk.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
www.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
servicedesk.kushals.com
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
empower.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
helpdesk.dobby.co.in
*.linkintime.co.in
sanithelpdesk.sansera.in
servicedesk.linkintime.co.in
*.linkintime.co.in
mail.linkintime.co.in
mail.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
mail.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
apps.linkintime.co.in
*.linkintime.co.in
helpdesk.alqimi.com
sanithelpdesk.sansera.in
instavote.linkintime.co.in
*.linkintime.co.in
helpdesk.alqimi.com
*.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
apps.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
apps.linkintime.co.in
*.linkintime.co.in
*.linkintime.co.in
ithelpdesk.tatanexarc.com
Certificate
The complete raw certificate details for *.linkintime.co.in in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIMQXfp2kLUOZygZ1M+MA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNDA0MTAxMDIyMDJaFw0y NTA0MjgxMTM2MDFaMH0xCzAJBgNVBAYTAklOMRQwEgYDVQQIEwtNYWhhcmFzaHRy YTEPMA0GA1UEBxMGTXVtYmFpMSowKAYDVQQKEyFMSU5LIElOVElNRSBJTkRJQSBQ UklWQVRFIExJTUlURUQxGzAZBgNVBAMMEioubGlua2ludGltZS5jby5pbjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALp2eZFNlCGIjsWaHl3ryH4tiKFE WhCE6vb7X7qj/RQK7teNV70Pa257EhxNCfCZKK/RZvWkIgK1Z2WWLPT3xmGLNcAU t76BVz7Nxz22ycTznUbcKsOrKr2ddQ5ZCv6hQtG3oWL0aHUKF8umo0Nx6ZbjKAoA 8Ch7FB2Rv9MKUh9wgXNqGuu8ai2UdVstGLdyo8LPAQ3WQ4pkz7dhFVb1xbz1KlE8 DGc3Hg6SDUzq3IM+251vmAkxMBeR3yU1BzOCLOhw5YoiFOQVENTXKxzac7ZH5jZQ Ncl9IJhpJt8EPLf+YnUu5MV2b66+al8NhHdJC8Dxzpi7TGg+4PHXmZJAaxUCAwEA AaOCAfEwggHtMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGOBggrBgEF BQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24u Y29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0 cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAE TzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9i YWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKg MIYuaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNy bDAvBgNVHREEKDAmghIqLmxpbmtpbnRpbWUuY28uaW6CEGxpbmtpbnRpbWUuY28u aW4wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjv f/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBQ13jH6ThCXrDeaHpLoomCz0SBd 1zATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAReVYdg8 0ZuCiGjofYrvBip3Yr5/T4YaCG8XYsLvpIeTjeWgQ0XuaWVr1vRyUPJeSLTgzx1N uHjZK3m8X8+CeH53Tb34aOxG6vxDop2lu7E8CVQnNOzDloUorDzRzH55LY4NbNBt MmNb6xh6osM1z3sJjB278LNoP5RWJnAdxp8EYfIXJ+/XGqHqaOWrcnmwJSUh9RA4 V+kXsITIgyRnFc+V4WwEuWWTHr4vwCY2jRVDAe0Kj7GhP16pwFOGX+7ldqCOAoI2 CyO3QJlj5kz++ruAZbiLQ4IwReT9M2OJtP7N6k/2F0uD3WHji1EZVLmxR2VgkaRT DBq6XO61oOKJqA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunZ5kU2UIYiOxZoeXevI fi2IoURaEITq9vtfuqP9FAru141XvQ9rbnsSHE0J8Jkor9Fm9aQiArVnZZYs9PfG YYs1wBS3voFXPs3HPbbJxPOdRtwqw6sqvZ11DlkK/qFC0behYvRodQoXy6ajQ3Hp luMoCgDwKHsUHZG/0wpSH3CBc2oa67xqLZR1Wy0Yt3Kjws8BDdZDimTPt2EVVvXF vPUqUTwMZzceDpINTOrcgz7bnW+YCTEwF5HfJTUHM4Is6HDliiIU5BUQ1NcrHNpz tkfmNlA1yX0gmGkm3wQ8t/5idS7kxXZvrr5qXw2Ed0kLwPHOmLtMaD7g8deZkkBr FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20261492148517824281352557374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 10:22:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-28 11:36:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LINK INTIME INDIA PRIVATE LIMITED' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.linkintime.co.in' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23538746861182568288760841057516771113164658716143283231260101044343440560066375968050920517592230386698187637892998461817698299445059368315955854833639090996594004147757078272856055310521841560777562060237279584082951107426287229846697649630150226168915766398158913525830082133604377008745877822410603984388997885825496487244562542330065294803235497893651931130810318664109075403219151312649098342495162081255962691122189456119205219828301957028442628765072132805345332546108674129860497516733641712685399043652671027876860550435956529262517536158713616373601229824571035167936774790833483632196952201149051807230741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkintime.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkintime.co.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 35de31fa4e1097ac379a1e92e8a260b3d1205dd7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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