pfedcert.wal-mart.com

- Wal-Mart Stores, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:b4:f2:a1:5a:90:a1:a4:d5:88:e2:5d:11:be:1d:b9:3e was issued on by GlobalSign nv-sa.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wal-Mart Stores, Inc.

Organization: Wal-Mart Stores, Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:b4:f2:a1:5a:90:a1:a4:d5:88:e2:5d:11:be:1d:b9:3e
Serial Number (int): 1492378699796039454643387526750172279060798
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: b5:ce:ff:0d:76:96:97:b9:1b:0d:fd:22:c5:17:0e:fb:71:ee:b4:2b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 64:7f:84:83:b5:48:0a:c5:a1:bc:b3:0d:e0:39:e0:06:00:84:a0:84
Fingerprint (sha256): a0:66:c0:d5:27:59:35:0c:4f:9c:fc:21:c5:5e:b2:75:5d:51:92:ab:6a:e3:33:b1:52:a5:7e:61:e1:dc:57:0b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate pfedcert.wal-mart.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pfedcert.wal-mart.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pfedcert.wal-mart.com
pfedcert.certretaillink.com
pfedcert.mywalmart.com
pfedcert.samsclub.com
pfedcert.walmartbenefits.com
pfedcert.walmartone.com
pfedcertext.certretaillink.com
pfedcertext.mywalmart.com
pfedcertext.samsclub.com
pfedcertext.wal-mart.com
pfedcertext.walmartone.com

Other certificates including the domain name wal-mart.com

(limited to 100 certificates)
retail.correction.api.fds.latam.wal-mart.com
pfedcert.wal-mart.com
ars.s01139.br.wal-mart.com
ems10.s03730.us.wal-mart.com
merlin-stage-api.wal-mart.com
proxy-obl-tp.wal-mart.com
trans.gts.wal-mart.com
tririga.wal-mart.com
dx201.wal-mart.com
camfederationjanisdev.cam.wal-mart.com
certsuppliersourcing.wal-mart.com
Prod20-ext.wireless.wal-mart.com
test-ecomintg.wal-mart.com
mobileservices-cert.wal-mart.com
ars.s00055.br.wal-mart.com
ikb-mx.dev.wal-mart.com
wmsmail.br.wal-mart.com
honts2024.homeoffice.wal-mart.com
symtest-32679-bp.wal-mart.com
ars.s01456.br.wal-mart.com
walmartapps.br.wal-mart.com
ars.s00160.br.wal-mart.com
ars.s00706.br.wal-mart.com
americas.itemfile.wal-mart.com
nonprod.walmart.com
sparc.cert.mutualauth.wal-mart.com
cf-prod.wal-mart.com
ciss16avpn01.warp.wal-mart.com
ars.s00645.cl.wal-mart.com
cis02.warp.wal-mart.com
ems10.s04195.us.wal-mart.com
pilotretlink.wal-mart.com
ems10.s02332.us.wal-mart.com
sslvpngwcdc.wal-mart.com
us-ho-wmt-scan-ndc-24.homeoffice.wal-mart.com
*.rzrpac.wal-mart.com
candidate.dev.abss.dev.cloud.wal-mart.com
ARPRTrn.wireless.wal-mart.com
qa-latambpm86.cloud.wal-mart.com
test-payto.wal-mart.com
stage-www11.wal-mart.com
apig.wal-mart.com
ars.s00607.cl.wal-mart.com
benefits-jrt-prod.cloud.wal-mart.com
ak-nonprod.walmart.com
apireconprod02.grir.subledger.wal-mart.com
ars.s00504.cl.wal-mart.com
eclosing.wal-mart.com
ftps.wal-mart.com
apireconstage02.giftcard.recon.wal-mart.com
ars.s00011.cl.wal-mart.com
snpcilog-sp02.wal-mart.com
communityclasses.wal-mart.com
labgsscmapi.wal-mart.com
terraformtest.wal.co
vip27-mexico-qa-https-web-p-1.walmart.com
ars.s01216.br.wal-mart.com
zy-nonprod.wal-mart.com
fa-nonprod.wal-mart.com
dmm.cn.wal-mart.com
sarnts1021.secure.ar.wal-mart.com
slap.wal-mart.com
sonar.walmart.com
fintech-ap-api-gateway-ext-stg.cloud.wal-mart.com
ars.s00207.cl.wal-mart.com
entpatientmdm-prod.wal-mart.com
pgc01.wal-mart.com
acsm3.wal-mart.com
ars.s01299.br.wal-mart.com
cf-nonprod.wal-mart.com
flash-mobile.homeoffice.wal-mart.com
NCAHANANA06.wal-mart.com
ars.s02801.br.wal-mart.com
eid.br.wal-mart.com
ak-prod3.walmart.com
Grumper-Prod.homeoffice.wal-mart.com
locator-retail-dev.wireless.wal-mart.com
ars.s00482.cl.wal-mart.com
sego.wal-mart.com
ars.s00228.cl.wal-mart.com
cws-1edcc40d-6dee-4fb1-a817-5f15540bbc00.wal-mart.com
S05075NTS200UKA.S05075.uk.wal-mart.com
vip01-misc-qa-https-web-p-1.walmart.com
rp-ndc-dmz1ecom1prod-auth.wal-mart.com
rfq-dev-jp-ea.wal-mart.com
ars.s00102.br.wal-mart.com
certMobileAPI.wal-mart.com
cf-prod.wal-mart.com
ems10.s03650.us.wal-mart.com
soefabric-qa.wal-mart.com
orderidentifier-online-trn.wireless.wal-mart.com
xx01.wal-mart.com
pcifedprod-sign.wal-mart.com
vip01-misc-qa-https-web-p-3.walmart.com
carrierintegration-trn.wireless.wal-mart.com
ems10.s05023.us.wal-mart.com
terraformtest.wal-mart.com
ars.s00556.br.wal-mart.com
testing2.dev.venafi.INC14829111.wal-mart.com
hazr022e262621.cloud.wal-mart.com

Certificate

The complete raw certificate details for pfedcert.wal-mart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzMYPLg3Id78swtFYRSK
y0gIXJS6KqIHtO5O9hooJ6I7hfhJjboq+WH9lnhg/iT2Km3u7ePGhVLyf5vpIfeK
qwt6Jv9FxhNy4exaYqkJI+bcOz3xLiDMFWxsw6GkcM4F5XemOaRw+U/nzwrLaCLI
DZ2a3NOnRxybsyQwu1vMFucIQS9D0pdsM6XRzgKhKGB5QbotJXGHAGndh2c9frW/
tpzjlI4E0YgOEZAB+FTCNqPoTtwB8NvVfBW7Psu2BL3qWapVBusKMR0gWytHLaux
8NAYxmpquuq89++IOwNykqnwJb+rbRktxEZR9O7yc4MSDcMaEgbESQcv4imPB8De
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492378699796039454643387526750172279060798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-05 16:05:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-05 16:05:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wal-Mart Stores, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfedcert.wal-mart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19087179773918163194500173362861857542896988017737196543987152757510932465993803693573459681395280889282140928403745156211269140119080881073967336910485531682155157933355523601824292557680652103550860081950519336749951957394272269356730187605651342553880436749333612276372087003285739075739763161088506237551150321459025421551924679093104048763761970223824681294912642983614099957566206944117394630956292398911647894791919819844056337180739758812329414123843133397264296756442923656366830033155815193475057105597443676328420480587629173089968642045291814325791257243918693353346714660502069414377488251272752483327599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcert.wal-mart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcert.certretaillink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcert.mywalmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcert.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcert.walmartbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcert.walmartone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcertext.certretaillink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcertext.mywalmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcertext.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcertext.wal-mart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfedcertext.walmartone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5ceff0d769697b91b0dfd22c5170efb71eeb42b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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