pointcenter.purinaproclub.com

Issued by Nestle External CA

About this certificate


This digital certificate with serial number 27:da:a7:c2:00:01:00:00:19:77 was issued on by Nestle .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([1.2.840.113549.1.9.15])
  • ERROR: Certificate doesn't contain any subjectAltName
  • ERROR: Certificate CN is not listed in subjectAltName

Nestec SA

Organization: Nestec SA
Organization unit: GLOBE
State / Province: Vaud
Locality: Vevey
Country: CH

Nestle

Organization: Nestle
Organization unit: IS/IT
State / Province: Vaud
Locality: Vevey
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 27:da:a7:c2:00:01:00:00:19:77
Serial Number (int): 188205771264338956392823
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: e1:8d:5a:49:e3:f5:ce:ef:aa:23:71:5a:b9:ef:9d:50:51:23:c5:59
AuthorityKeyId: ab:12:9a:d0:62:96:3b:a6:95:83:ee:54:26:a8:cd:d7:6f:71:0b:e2

Fingerprint (sha1): e4:0f:b5:54:3c:18:f0:bc:59:15:0f:c2:cc:2c:8d:67:72:1d:e4:c7
Fingerprint (sha256): 78:f4:8e:0d:95:cf:1c:8b:c7:77:34:8a:44:b6:b1:5c:ac:d5:d0:aa:49:77:d1:9a:c8:7c:8b:a3:54:bd:9e:be

Issuing Certificate URL: http://crl.nestle.com/Nestle%20External%20CA(1).crt

Revocation information

CRL Distribution Point: http://crl.nestle.com/Nestle%20External%20CA(1).crl

Check the revocation status for the current certificate on pointcenter.purinaproclub.com
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name).

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGMzCCBBugAwIBAgIKJ9qnwgABAAAZdzANBgkqhkiG9w0BAQUFADCBljELMAkG A1UEBhMCQ0gxDTALBgNVBAgTBFZhdWQxDjAMBgNVBAcTBVZldmV5MQ8wDQYDVQQK EwZOZXN0bGUxDjAMBgNVBAsTBUlTL0lUMRswGQYDVQQDExJOZXN0bGUgRXh0ZXJu YWwgQ0ExKjAoBgkqhkiG9w0BCQEWG3BraS1zZWN1cml0eS1leHRAbmVzdGxlLmNv bTAeFw0xMjEwMDIxNDU1MzNaFw0xNzEwMDExNDU1MzNaMHgxCzAJBgNVBAYTAkNI MQ0wCwYDVQQIEwRWYXVkMQ4wDAYDVQQHEwVWZXZleTESMBAGA1UEChMJTmVzdGVj IFNBMQ4wDAYDVQQLEwVHTE9CRTEmMCQGA1UEAxMdcG9pbnRjZW50ZXIucHVyaW5h cHJvY2x1Yi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwIan KBTGWN/Yf6UjqyrlF9og/d8E4fyVnGMJfPgoVWwx/iX67YregHMZcAM9pVNcQbjn K1mPI8AwXh0fTfP9xdzHTNCwBQHUsHQV/Wq7E3tyOowEcel2ntQCXxfdPqYLHU2N ZhXK9KObF6OK7Z/UMUx+kXbZGzbjKDKcHIDHODaSdlua0UjOLB4ceOKJj9YBmpSY 61Mgkh1uvpd5XZxGbQc0nsMVaQYfilT1rnwbGG+cg/yejwqf6XR47wGtOjp2p1Ku 3W/UExUssHfKsZTTjsZ0Lz8Gi4feMAkIyWgJTfffRNCFMRYARyDtnRQrTp1pjB8s MNFjoZZrAEvMXWBJAgMBAAGjggGeMIIBmjALBgNVHQ8EBAMCBaAwRAYJKoZIhvcN AQkPBDcwNTAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIH MAoGCCqGSIb3DQMHMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBThjVpJ 4/XO76ojcVq5751QUSPFWTAfBgNVHSMEGDAWgBSrEprQYpY7ppWD7lQmqM3Xb3EL 4jBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLm5lc3RsZS5jb20vTmVzdGxl JTIwRXh0ZXJuYWwlMjBDQSgxKS5jcmwwTwYIKwYBBQUHAQEEQzBBMD8GCCsGAQUF BzAChjNodHRwOi8vY3JsLm5lc3RsZS5jb20vTmVzdGxlJTIwRXh0ZXJuYWwlMjBD QSgxKS5jcnQwPAYJKwYBBAGCNxUHBC8wLQYlKwYBBAGCNxUIh6bQIoKMmAqG1YsM hZ66G4TTlQ127/RpgpuaMAIBZAIBBzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUF BwMBMA0GCSqGSIb3DQEBBQUAA4ICAQB3cN3hpQVGLnFLMxFBSKKtXDoGSnL366iP Ie2ITK4dd/9vL+7BQuy/2IZVoAW37d/ofqFiCFlVZt6CQlFbD+ymlBFchrwTfsOs SgQsgwrH76NdtUhxHd5OWkYB766E6cpScenrz7upKxhbRUrg7fYSMHXEPAuQvveP TX/oCmH+AtfUk+yHRMnW2cN+sdCbDXJUp3p1ypylkIVp9JZa2aRHBvArI8Jq10+u z8bhvIjc/8FBvhBg/jCzjE8Z1mqIvPfTb2cwoGuljSHqQdngEbwgWpG7eGLOwT1n ce3nwWRnCJp3eGYOzYPiH7xu++mTM+KuHpoKtWZe5husr1p/156Xjlg3TmucgC0D MgCQ6rN4ofPStRvSOKk9yVkN/1gxyGmzESmHVI5uaJwOeJ9Lr+JUDQvrQLlKrt2U TZ2FpwCM5frYf+Cm0X1+2vyI53sZe0N+AA9NlpmnkRYvNHoB0aw9CLyqTT9Tq0+y YGJb3IolOfEGu9HWAbekqqnba3wo5VZm5ORLzYVrkKv2rrF+RvM3upalFRmheP+Y 9jimpx2drvT7mttd2C7+PRxlqlJD3eOujLJrAmdh6pZqXFtMiS3E6vu3+0XrVRyU L5qDvnoB3Twj/ZUIhQpJySUin6LspJXqxIvB3lxpjvwrszyw3rAPAQFIrgl+GvDc krP/trFpxg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8CGpygUxljf2H+lI6sq 5RfaIP3fBOH8lZxjCXz4KFVsMf4l+u2K3oBzGXADPaVTXEG45ytZjyPAMF4dH03z /cXcx0zQsAUB1LB0Ff1quxN7cjqMBHHpdp7UAl8X3T6mCx1NjWYVyvSjmxejiu2f 1DFMfpF22Rs24ygynByAxzg2knZbmtFIziweHHjiiY/WAZqUmOtTIJIdbr6XeV2c Rm0HNJ7DFWkGH4pU9a58GxhvnIP8no8Kn+l0eO8BrTo6dqdSrt1v1BMVLLB3yrGU 047GdC8/BouH3jAJCMloCU3330TQhTEWAEcg7Z0UK06daYwfLDDRY6GWawBLzF1g SQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 188205771264338956392823 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS/IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle External CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-02 14:55:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-01 14:55:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestec SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GLOBE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pointcenter.purinaproclub.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21681688252323045965182601483780040103365924081686920497769962525032097496543061492806314669568510876841797915525319174101197710059935196176781149493040884669453118744270759618275266978159231557422338568519989868251395450296610215478804162021159851504141002543061972101036746352775765273157951332307249431712684363561122366466500715857070628248234816103048537986464270701047297006328816178410677701394004511805822797108498643641272900969990293143404497041812600568018334131437056274594875563953459740295317374374488339217365327438236347062503643758213359883801961690129574199184502111342135995393517055100210078638153 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e18d5a49e3f5ceefaa23715ab9ef9d505123c559 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab129ad062963ba69583ee5426a8cdd76f710be2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15312930.4393994.13976972.10984731.9751181.118.1833577.4640048 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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