ed-stage.infoftps.com

- Fidelity Information Services, LLC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 35:a1:c9:22:2c:48:99:42:f7:8c:45:16:b1:ac:ce:db was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Fidelity Information Services, LLC

Organization: Fidelity Information Services, LLC
State / Province: Florida
Locality: Jacksonville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 35:a1:c9:22:2c:48:99:42:f7:8c:45:16:b1:ac:ce:db
Serial Number (int): 71289123042617614831384008114762993371
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cd:c2:e0:29:4b:6d:15:bf:d0:44:d1:38:b8:83:61:07:fb:4d:16:88
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6f:6a:d0:ff:5d:3d:bb:6b:28:1d:76:d6:64:e0:ed:62:a9:cb:f7:a9
Fingerprint (sha256): a1:2b:bb:20:aa:a0:b7:97:25:39:d1:f3:00:ee:aa:ed:52:b5:49:18:eb:95:d0:be:dd:8f:e3:92:f5:b5:00:e8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ed-stage.infoftps.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ed-stage.infoftps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ed-stage.infoftps.com
sugramidledsa51.ad001.infoftps.com
sugramidledsa52.ad001.infoftps.com

Other certificates including the domain name infoftps.com

(limited to 100 certificates)
lync-prod.infoftps.com
sso-cte.vantiv.com
mail.vantiv.com
fraudsight.infoftps.com
S1FLOKYDLI3WC02.AD001.infoftps.com
SDGRAMIDLXWBE02.AD001.InfoFTPS.COM
icwebclient.infoftps.com
lync-prod.infoftps.com
mail.vantiv.com
STGRAMIDLXFEX01.AD001.InfoFTPS.COM
wssx-cert.vantiv.com
lync-prod.infoftps.com
wsx-cert.vantiv.com
ed.infoftps.com
wsx.vantiv.com
wssx-cert.vantiv.com
s1flokydllync04.ad001.infoftps.com
ed-stagetls2.infoftps.com
mail.vantiv.com
lync-prod.infoftps.com
UATSPODLP.vantiv.com
sugramidlxwbe01.ad001.infoftps.com
ormb-dev.infoftps.com
wssx.vantiv.com
icwebclient.infoftps.com
sit-oracleebs.infoftps.com
wssx-cert.vantiv.com
mail.vantiv.com
mail.vantiv.com
access.vantiv.com
disputes.infoftps.com
SW1FLOAPHYINT80.AD001.InfoFTPS.COM
sso-cte.vantiv.com
wssx.vantiv.com
Connerspc.infoftps.com
S1FLOKYDLVRTA01.AD001.infoftps.com
mail.vantiv.com
sit-oracleebs.infoftps.com
icwebclient.infoftps.com
menuatm-raftgateway.infoftps.com
wssx-cert.vantiv.com
wssx-cert.vantiv.com
mail.vantiv.com
ormb-prod.infoftps.com
SDGRAMIDLXFEX01.AD001.InfoFTPS.COM
lync-prod.infoftps.com
cgcontrolservice.infovantiv.com
wssx.vantiv.com
wssx-cert.vantiv.com
S1GRAMIDLI3WC02.AD001.infoftps.com
sso.vantiv.com
Connerspc.infoftps.com
ed-stage.infoftps.com
ormb-dev.infoftps.com
wsx-cert.vantiv.com
icwebclient.infoftps.com
puflopmfrdmb001.infoftps.com
stgramidlbiwb01.ad001.infoftps.com
batchsettle-raftgateway-test.infoftps.com
cppm.infoftps.com
wsx.vantiv.com
sso.vantiv.com
wsx-cert.vantiv.com
mail.vantiv.com
test.disputes.infoftps.com
sso-cte.vantiv.com
S1GRAMIDLI3WC01.AD001.infoftps.com
mail.vantiv.com
wssx.vantiv.com
sit-oracleebs.infoftps.com
uat3.disputes.infoftps.com
ormb-dev.infoftps.com
mail.vantiv.com
wsx.vantiv.com
lync-prod.infoftps.com
S1FLOKYDLI3WC01.AD001.infoftps.com
dev.informationbuilder.infoftps.com
stage.disputes.infoftps.com
Connerspc.infoftps.com
VantivAnalytics.Vantiv.com

Certificate

The complete raw certificate details for ed-stage.infoftps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIQNaHJIixImUL3jEUWsazO2zANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDA1MDYxMDI1MTNaFw0yNTA1MDYxMDI1MTJaMIGDMQswCQYDVQQGEwJVUzEQMA4G
A1UECBMHRmxvcmlkYTEVMBMGA1UEBxMMSmFja3NvbnZpbGxlMSswKQYDVQQKEyJG
aWRlbGl0eSBJbmZvcm1hdGlvbiBTZXJ2aWNlcywgTExDMR4wHAYDVQQDExVlZC1z
dGFnZS5pbmZvZnRwcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5jDI/6fOkZED4fVEdoAdrO0ymBs7Otxw9tHAfGM45oeuwJl+FshtxPvMAW6IP
1nJMQ0cZjP9x9YGGYlpKOGvHnbNxN0+KaAhYz+kQg92uYt1xKq/mwsRnIlzh5MyN
47hYKjMA1rq1R870dq4ibAT23NEUs6d4tBRFPO9XCJis1+ftZkAfHmejg5a4bHXm
1Qx28m5V0Dxv0jK7a05WGOJD7SIkWPudVIckyWTK41iOYYLyrcyLo8++H+GKU75F
3rd6eWCWTAiNEC6Zs8CuPNBHgUPvB7cLSLCTxnFq8zZoTOTTiUMzvyPrqG7A2nWO
W1/kFcLfZgWbufXx1LdgtrgFAgMBAAGjggGqMIIBpjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTNwuApS20Vv9BE0Ti4g2EH+00WiDAfBgNVHSMEGDAWgBSConB03bxT
P8971PfNf6dgxgpMvzBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6
Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1
c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDov
L2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBoBgNVHREEYTBfghVlZC1zdGFn
ZS5pbmZvZnRwcy5jb22CInN1Z3JhbWlkbGVkc2E1MS5hZDAwMS5pbmZvZnRwcy5j
b22CInN1Z3JhbWlkbGVkc2E1Mi5hZDAwMS5pbmZvZnRwcy5jb20wDgYDVR0PAQH/
BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBMGA1UdIAQMMAowCAYGZ4EMAQIC
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwGlKyXgif
EhbKSacLppt1tZiIwdsnPDnVhNJMahcJiMibi5iDT+bd7K867U7vZveFwYvugL3D
1eD+d4cFwL7g1Jyi34RXP8rAumWJ8B5wunh43TJxc7mVyPnTnknBvlLUxhMyb8wL
C/+omyWMGWSWkJMEmUj+0dwJFi+cLVN+hyNIOZCxSqczHPB5mGLt2ywWKbJKO7S8
OV8OP5BOxlGfHkXlohFCTCHt0vIL+dHiOrhgoDVUUAA8COtyGXQ94pdiLgaqSMcc
cH1U2Pj9oOIwCfGRozPiMZl9okYMnmogPmoSMgCyNv617pDZyYcwklZOCZ0GRXu+
SJTFUxz8yH+C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYwyP+nzpGRA+H1RHaAH
aztMpgbOzrccPbRwHxjOOaHrsCZfhbIbcT7zAFuiD9ZyTENHGYz/cfWBhmJaSjhr
x52zcTdPimgIWM/pEIPdrmLdcSqv5sLEZyJc4eTMjeO4WCozANa6tUfO9HauImwE
9tzRFLOneLQURTzvVwiYrNfn7WZAHx5no4OWuGx15tUMdvJuVdA8b9Iyu2tOVhji
Q+0iJFj7nVSHJMlkyuNYjmGC8q3Mi6PPvh/hilO+Rd63enlglkwIjRAumbPArjzQ
R4FD7we3C0iwk8ZxavM2aEzk04lDM78j66huwNp1jltf5BXC32YFm7n18dS3YLa4
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71289123042617614831384008114762993371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 10:25:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 10:25:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fidelity Information Services, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ed-stage.infoftps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23423219784845383381881730884594777828622915042829729595412691788118950004958920157425422755784571238672307622095252603429445247825382844057435822563961244070351594649102979936117205315816153934343530093395445121978268958937122427873515864362645030180449148487478106329921355210300322660521078841923911491873403020299574872993709459235706308544614986178582415088670710403689846297791293008300061576236452846062221065089353005648126731018824963140621572619621015415490511356386635438090414036103092614200620783541697605343932323509087281730922490337330368974567384210879668655860109726224137001646937829972047939680261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdc2e0294b6d15bfd044d138b8836107fb4d1688
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ed-stage.infoftps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugramidledsa51.ad001.infoftps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugramidledsa52.ad001.infoftps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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