*.eos-gansu-1.cmecloud.cn

- 中移（苏州）软件技术有限公司 -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 7b:2e:c0:11:30:43:47:fc:85:90:fe:70:cc:5f:13:22 was issued on by UniTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

中移（苏州）软件技术有限公司

Organization: 中移（苏州）软件技术有限公司
State / Province: 江苏省
Locality: 苏州市
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 7b:2e:c0:11:30:43:47:fc:85:90:fe:70:cc:5f:13:22
Serial Number (int): 163737784721496536748858814145341887266
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 34:cf:3d:0f:bd:ca:a0:cd:d7:22:ce:e6:f8:78:87:d0:a6:1b:ef:c0
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): 57:bc:81:8f:f6:73:67:0c:10:f1:2e:41:8b:8e:87:ca:3c:ca:11:89
Fingerprint (sha256): a5:31:59:21:d9:c6:91:b6:9b:b3:cd:0a:45:9c:b0:02:bc:89:e2:9c:2a:d2:3e:e2:14:c1:ac:7c:87:ca:85:17

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate *.eos-gansu-1.cmecloud.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eos-gansu-1.cmecloud.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eos-gansu-1.cmecloud.cn
eos-gansu-1.cmecloud.cn
*.eos-gansu-1-internal.cmecloud.cn
eos-gansu-1-internal.cmecloud.cn

Other certificates including the domain name cmecloud.cn

(limited to 100 certificates)
*.eos.xian-4.cmecloud.cn
*.eos.nanning-2.cmecloud.cn
*.eos.hangzhou-zs-1.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ningxia-1.cmecloud.cn
*.eos.huhehaote-11.cmecloud.cn
smp.ecso.hnzkh-1.cmecloud.cn
console.ecso.jsha-1.cmecloud.cn
*.eos.ecso.jscz-1.cmecloud.cn
*.cidc-rp-2159.xjaksxczwwwq1.joint.cmecloud.cn
*.eos.guiyang-5.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
console.ecs.hnzkh-1.cmecloud.cn
*.ahmashcso1.joint.cmecloud.cn
*.obs.cqdjmdyhlwq1.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.cmecloud.cn
console-beijing-1.cmecloud.cn
cidc-rp-13.joint.cmecloud.cn
*.eos.ecs.hnzkh-1.cmecloud.cn
*.eos.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.sdly-1.cmecloud.cn
*.eos.ecso.jxnc-1-internal.cmecloud.cn
*.eos.anhui-3.cmecloud.cn
*.ecis.zs-guian-1.cmecloud.cn
*.smp.ecs.jswx-1.cmecloud.cn
*.eos.ecs.jswx-1.cmecloud.cn
*.obs.cqyczwwwq1.joint.cmecloud.cn
*.eos-tianjin-1.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.eos-xinjiang-1.cmecloud.cn
*.eos.chongqing-4.cmecloud.cn
*.cidc-rp-2121.fjptmzzlzhcso1.joint.cmecloud.cn
*.obs.cidc-rp-2005.joint.cmecloud.cn
*.eos-guiyang-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.tjbhylyhcso2.joint.cmecloud.cn
*.jsycdthlwq1.joint.cmecloud.cn
*.xjbzzwwwq1.joint.cmecloud.cn
*.eos-huhehaote-6.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
*.obs.tjshnwqhcso2.joint.cmecloud.cn
*.obs.cidc-rp-11.joint.cmecloud.cn
smp.ecs.jswx-1.cmecloud.cn
*.ecis.zs-nanjing-1.cmecloud.cn
*.ecis.huabei-3.cmecloud.cn
*.eos-ningbo-3.cmecloud.cn
smp.ecs.hnzkh-1.cmecloud.cn
*.smp.ecso.jsnj2-1.cmecloud.cn
*.obs.jsycdthlwq1.joint.cmecloud.cn
*.eos.nanjing-zs-1.cmecloud.cn
*.eos.chongqing-4-internal.cmecloud.cn
*.ecis.zs-qingdao-1.cmecloud.cn
*.eos.ecs.hnld-1-internal.cmecloud.cn
*.eos-chengdu-6.cmecloud.cn
*.eos-guiyang-4.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.eos.ecs.hnzkz-1.cmecloud.cn
*.ecis.zs-shanghai-1.cmecloud.cn
console.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.jsxy-1.cmecloud.cn
*.eos.hainan-hw-1.cmecloud.cn
*.eos-dongguan-2.cmecloud.cn
*.eos-guangxi-1.cmecloud.cn
*.lygrmxchcso1.joint.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.cidc-rp-2140.jsycdthlwq1.joint.cmecloud.cn
*.ecis.zs-beijing-1.cmecloud.cn
*.obs-website.cidc-rp-11.joint.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.eos.ecs.hbxy-1.cmecloud.cn
portal.zjdx.cmecloud.cn
*.obs.cqychlwq1.joint.cmecloud.cn
*.eos-chongqing-2.cmecloud.cn
*.eos-huanan-1.cmecloud.cn
dingdong.cmecloud.cn
*.eos-hubei-1.cmecloud.cn
*.cidc-rp-2000.joint.cmecloud.cn
*.obs.cidc-rp-2000.joint.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.ecis.zs-guangzhou-1.cmecloud.cn
*.obs.zjjhhyyhcso1.joint.cmecloud.cn
*.obs.fjptmzzlzhcso1.joint.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ecs.xjklmy-1-internal.cmecloud.cn
*.secpool.ecs.hnld-1.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.jsntzwwwq.joint.cmecloud.cn
*.eos-yunnan-2.cmecloud.cn
*.obs.tjbhylyhcso2.joint.cmecloud.cn
*.eos.guiyang-zs-1.cmecloud.cn
*.obs.gdgznshcso1.joint.cmecloud.cn
*.obs.cqbshlwq1.joint.cmecloud.cn
*.eos-jilin-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.eos-anhui-1.cmecloud.cn
*.ecis.zs-hangzhou-1.cmecloud.cn

Certificate

The complete raw certificate details for *.eos-gansu-1.cmecloud.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIQey7AETBDR/yFkP5wzF8TIjANBgkqhkiG9w0BAQsFADBA
MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxHjAcBgNVBAMMFVNIRUNB
IE9WIFNlcnZlciBDQSBHNTAeFw0yMzEyMTQwMzAwMjNaFw0yNTAxMTQxNTU5NTla
MIGOMQswCQYDVQQGEwJDTjESMBAGA1UECAwJ5rGf6IuP55yBMRIwEAYDVQQHDAno
i4/lt57luIIxMzAxBgNVBAoMKuS4reenu++8iOiLj+W3nu+8iei9r+S7tuaKgOac
r+aciemZkOWFrOWPuDEiMCAGA1UEAwwZKi5lb3MtZ2Fuc3UtMS5jbWVjbG91ZC5j
bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOHXwkS+loAB/fNhnx7C
MSnWdhb86WymGia5bF02c71B5QjPUloDLCWTyh4tKE8BPIVeWxOausjasApjyb5u
2HQgFxmcZ+Ks84BJA82lFJc1ryvSqGxOEApajk1mRQTuMtuXqAyGctJ7UJmUONCD
j3ve1CY9B7qY/H4bauwIjH1sWnq5yD2JaPvBqz+2fv3V9MZkz1PYmVQUMew9lIrB
uhK/cLGCZLCWiypM8A9mUQ1HDO7DtzsZ2GZ/ACcofigD4jXReamc72V7ouihBqNY
WRsGzc2/A5yTF7fnM6SglFnAnHj1/GD8AlzDCwwpvcQH76iNAtv/SBoLmYKLkrnT
UfMCAwEAAaOCAfEwggHtMHcGCCsGAQUFBwEBBGswaTAwBggrBgEFBQcwAYYkaHR0
cDovL29jc3AuZ2xvYmFsLnNoZWNhLmNvbS9vdnNjYWc1MDUGCCsGAQUFBzAChilo
dHRwOi8vY2VydHMuZ2xvYmFsLnNoZWNhLmNvbS9vdnNjYWc1LmNlcjAfBgNVHSME
GDAWgBQDeaONUl/U6YiSH0NYVCUC9IeLfjCBgwYDVR0RBHwweoIZKi5lb3MtZ2Fu
c3UtMS5jbWVjbG91ZC5jboIXZW9zLWdhbnN1LTEuY21lY2xvdWQuY26CIiouZW9z
LWdhbnN1LTEtaW50ZXJuYWwuY21lY2xvdWQuY26CIGVvcy1nYW5zdS0xLWludGVy
bmFsLmNtZWNsb3VkLmNuMB0GA1UdDgQWBBQ0zz0Pvcqgzdcizub4eIfQphvvwDAO
BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAgBgNVHSAEGTAXMAsGCSqBHIbv
OgEBAjAIBgZngQwBAgIwEwYKKwYBBAHWeQIEAwEB/wQCBQAwOAYDVR0fBDEwLzAt
oCugKYYnaHR0cDovL2NybC5nbG9iYWwuc2hlY2EuY29tL292c2NhZzUuY3JsMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEA
GTvF8vIrpzLr94uM5SMwXuVToB1ZKRlhs2SRsMjbQR+/vUYM5hR//cZyY3KxRSpH
hQqYxN+q6kROeu8pIJ9ZuCeR80EqzT6KMSXo1GqwOqIRD+iVF4GKSwt8f19uJ8er
LYYKQKGpfaL09TaiatSsZkWrsAWZ9+wXK3ziAjtxeriepjcpYATC1y3zWLFPeeWx
M3vxaTKvsE2WTMF7Suxn/GGeYAx/PCeBixaEiaiQwCmKxxJ23D0Mez4cE1wi1kS4
rbeawsw57F9tRr4cbJPMF+wQgv/buQOXNAIdkz1Na/+3sqxBG4awvR8PPB16aZl6
FfvoYmDseGYvM8IJxF/vzA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dfCRL6WgAH982GfHsIx
KdZ2FvzpbKYaJrlsXTZzvUHlCM9SWgMsJZPKHi0oTwE8hV5bE5q6yNqwCmPJvm7Y
dCAXGZxn4qzzgEkDzaUUlzWvK9KobE4QClqOTWZFBO4y25eoDIZy0ntQmZQ40IOP
e97UJj0Hupj8fhtq7AiMfWxaernIPYlo+8GrP7Z+/dX0xmTPU9iZVBQx7D2UisG6
Er9wsYJksJaLKkzwD2ZRDUcM7sO3OxnYZn8AJyh+KAPiNdF5qZzvZXui6KEGo1hZ
GwbNzb8DnJMXt+czpKCUWcCcePX8YPwCXMMLDCm9xAfvqI0C2/9IGguZgouSudNR
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163737784721496536748858814145341887266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 03:00:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '江苏省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '苏州市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中移（苏州）软件技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eos-gansu-1.cmecloud.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28510013277331203867202828098940331072528316516343814307558904192483035244975360683448468231749792231288497787543630410564436197359681077642694839141656110850379511971199560774379153409682278566488417382594779559377503965659068150965188224584453835473017641938913179377144057850240260105093411195599090470585998731279295594360560729635237167987159586242925727143004722740497627054693878374608057113924242962033469338965226093230004657171455517701786076754561112729088059745245220437259041910644056753987479072916028543685026673531781007891516397827547915954858493428907229556139669432218826561547790798095309478253043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-gansu-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-gansu-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-gansu-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-gansu-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34cf3d0fbdcaa0cdd722cee6f87887d0a61befc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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