www.popcornbuddhausa.com
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 19:b7:fb:24:d3:c0:ea:0c:9c:c7:e4:a1 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.popcornbuddhausa.com,OU=Domain Control Validated,C=US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 19:b7:fb:24:d3:c0:ea:0c:9c:c7:e4:a1Serial Number (int): 7959544663851543669005345953
Serial Number lenght: 93 bits, 12 octets
SubjectKeyId: 35:ac:99:03:d3:30:c7:e3:26:14:59:2a:e1:26:1e:64:3a:0d:77:d9
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): ca:c9:3a:77:81:18:01:ea:d1:1c:61:8c:72:45:d5:88:3a:6c:f8:9a
Fingerprint (sha256): 9e:ea:65:62:17:e9:c1:45:17:00:b8:68:ac:cd:49:19:b3:b0:d4:33:70:a3:b0:a5:e2:47:83:b6:03:da:66:b1
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate www.popcornbuddhausa.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.popcornbuddhausa.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.popcornbuddhausa.com
popcornbuddhausa.com
popcornbuddhausa.com
Other certificates including the domain name popcornbuddhausa.com
(limited to 100 certificates)
www.popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
popcornbuddhausa.com
popcornbuddhausa.com
dev.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
popcornbuddhausa.com
popcornbuddhausa.com
dev.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
dev.popcornbuddhausa.com
www.popcornbuddhausa.com
www.popcornbuddhausa.com
Certificate
The complete raw certificate details for www.popcornbuddhausa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdjCCBl6gAwIBAgIMGbf7JNPA6gycx+ShMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE3MDIxNjE1NTc1MVoXDTE4MDIx NzE1NTc1MVowUzELMAkGA1UEBhMCVVMxITAfBgNVBAsTGERvbWFpbiBDb250cm9s IFZhbGlkYXRlZDEhMB8GA1UEAxMYd3d3LnBvcGNvcm5idWRkaGF1c2EuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQCxzd/gpIm9uXyk6DBr8821 WxRUW6Z1xsVBEo9+dmL83ympsgI2d6dfolNca6lzfk6AM7jTGITR84vCor/mXfva o8GgiCJtbh3HjJAtuwLoDahpe4qqcfwxsfvRUt9VCSYAq+f3EvpJGCRyfrjVJ4Oo cRiOndceGhgClArgs116IwtanBFTR62Xp7PVjUdJAFOsVD/5RQ74EB8uo5EYuOsz cQCliMx8pFdfB32Yyn1dHVtJr39fX/L+1VSuD+XmX0pLivLkVMvEsLa2xvFW3aAM 9GFLfUGgdtkcthgyWAONLeUYwcGPyWekk6/tR8GoHxPBg654tF4cmEFU6BqJsQID AQABo4IETzCCBEswDgYDVR0PAQH/BAQDAgWgMIGJBggrBgEFBQcBAQR9MHswQgYI KwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUyLmFscGhhc3NsLmNvbS9jYWNlcnQvZ3Nh bHBoYXNoYTJnMnIxLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AyLmdsb2Jh bHNpZ24uY29tL2dzYWxwaGFzaGEyZzIwVwYDVR0gBFAwTjBCBgorBgEEAaAyAQoK MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z aXRvcnkvMAgGBmeBDAECATAJBgNVHRMEAjAAMD4GA1UdHwQ3MDUwM6AxoC+GLWh0 dHA6Ly9jcmwyLmFscGhhc3NsLmNvbS9ncy9nc2FscGhhc2hhMmcyLmNybDA5BgNV HREEMjAwghh3d3cucG9wY29ybmJ1ZGRoYXVzYS5jb22CFHBvcGNvcm5idWRkaGF1 c2EuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU NayZA9Mwx+MmFFkq4SYeZDoNd9kwHwYDVR0jBBgwFoAU9c3VPAhQ+WpPOreX2laD 5mnSaPcwggJtBgorBgEEAdZ5AgQCBIICXQSCAlkCVwB1AN3rHSt6DU+mIIuBrYFo cH4ujp0B1VyIjT0RxM227L7MAAABWkek4mMAAAQDAEYwRAIgS7nkIQn3i6aCgAGY 6wjnRR5sjFDrMCElKVTwPPxQEl4CIAeYemk9YSc61wMucj5MYzls9qAOFnvapu35 n2NYie5EAHYAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFaR6Ti uwAABAMARzBFAiEA/XKdj7WMOs/kLALT9SG2rNmeXrZEumkqUGJZOhbrAfcCICY/ jNE/JQpBqLEwgbKTBJHJ/8dw26KZHjmv6JWKqp7rAHUAu9nfvB+KcbWTlCOXqpJ7 RzhXlQqrUugakJZkNo4e0YUAAAFaR6TmBgAABAMARjBEAiAyo/AA5U4WJNFAGy3L 8upQt6yYZfF4XFjCL8jWYPDOzQIgZvE5KvMnOJNh5PCBVA+Hl3P+5EwfarN5zYXP NJ2lflgAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVpHpOVA AAAEAwBHMEUCIGuBuW4Uw7hMcPQALMMcnmzoXTfbzazg4RuG4th/3bQIAiEAmVyM P1ToFzJ7lEP1E1u4jfHhvY/43i1xh7rnD2X9w24AdwDuS723dc5guuFCaR+r4Z5m ow9+X7By2IMAxHuJeqj9ywAAAVpHpOg5AAAEAwBIMEYCIQDnTGkl/PQEHW7j4bFI 2lNt9K+KNsaKrU7eW2eCXslyrQIhAPRWlV+u4kcFBgdsnObRTdBBzooWvz66Mj8l EZkTMCXZMA0GCSqGSIb3DQEBCwUAA4IBAQDTYhjh5k9mZsK5tN4x0KOVeL43+bAv AhN7l3Ii7Vx2kLghAvaFrOWKoTOE3H6V0SXAbvybOkeAa2FG8nlxuOHvkW8CFWpR f9TP/ihBWP+E8bNYYh0YuN+8sKr0fCc/pMK694hJjcdfScTiX+QeeCJVmlBNFTkz kxvk+YbI676lmToZzrnPs1FNjr87g0maBT2QB2qcYWmWbNYTxdxhQuoL1wGNNtVI fYgLGDIHERP5WRdOvirze0P0IqwmU482dtzI97Dwkeb8vaT6IywRR6e1Ahfk9mre 96f2X6lJshbobIOotRTApIHlpuHkBAeqBRRoa9lgK+1wHnxMmA1vEWHf -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQCxzd/gpIm9uXyk6DBr 8821WxRUW6Z1xsVBEo9+dmL83ympsgI2d6dfolNca6lzfk6AM7jTGITR84vCor/m Xfvao8GgiCJtbh3HjJAtuwLoDahpe4qqcfwxsfvRUt9VCSYAq+f3EvpJGCRyfrjV J4OocRiOndceGhgClArgs116IwtanBFTR62Xp7PVjUdJAFOsVD/5RQ74EB8uo5EY uOszcQCliMx8pFdfB32Yyn1dHVtJr39fX/L+1VSuD+XmX0pLivLkVMvEsLa2xvFW 3aAM9GFLfUGgdtkcthgyWAONLeUYwcGPyWekk6/tR8GoHxPBg654tF4cmEFU6BqJ sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7959544663851543669005345953 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-16 15:57:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-17 15:57:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.popcornbuddhausa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23354428912929971066812021525728379163861702938059795072067066553034700019044135658989116913174733968617804657994589009334780484104102600068751710580743150589745115211950400641176089864735127019516858412670999614369493579522775224579455155818117656608888485733797975275602634136673532588415293566878298561051689879333603596163665557827285757165900274554447090154452848514906406800893182969936308934162971408863439983230190652900911303065427950614579047987190738000901440457005642282813148453004327861333557755836675459049544526219921083891535904357729955808631075754365567089538438719495886682868790223826233060919729 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popcornbuddhausa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popcornbuddhausa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 35ac9903d330c7e32614592ae1261e643a0d77d9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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