www.sonrisa.nescafe.com.mx

Issued by Nestle External CA

About this certificate


This digital certificate with serial number 2a:9e:7b:b6:00:01:00:00:1b:35 was issued on by Nestle .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([1.2.840.113549.1.9.15])
  • ERROR: Certificate doesn't contain any subjectAltName
  • ERROR: Certificate CN is not listed in subjectAltName

Nestec SA

Organization: Nestec SA
Organization unit: Globe
State / Province: Vaud
Locality: Vevey
Country: CH

Nestle

Organization: Nestle
Organization unit: IS/IT
State / Province: Vaud
Locality: Vevey
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 2a:9e:7b:b6:00:01:00:00:1b:35
Serial Number (int): 201262892156687929580341
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: e0:25:e1:9b:1d:1c:d6:61:f6:30:85:59:e3:e0:5f:a0:f1:e1:f9:9f
AuthorityKeyId: ab:12:9a:d0:62:96:3b:a6:95:83:ee:54:26:a8:cd:d7:6f:71:0b:e2

Fingerprint (sha1): d3:de:9d:85:ec:bc:07:83:1a:fa:c6:67:f7:cb:d3:9c:1a:23:bb:85
Fingerprint (sha256): e4:00:6f:7b:59:4b:13:05:50:8d:33:3d:ed:86:87:01:7e:84:14:1b:8c:23:71:8f:70:67:00:c6:76:99:b3:0f

Issuing Certificate URL: http://crl.nestle.com/Nestle%20External%20CA(1).crt

Revocation information

CRL Distribution Point: http://crl.nestle.com/Nestle%20External%20CA(1).crl

Check the revocation status for the current certificate on www.sonrisa.nescafe.com.mx
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name).

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGMDCCBBigAwIBAgIKKp57tgABAAAbNTANBgkqhkiG9w0BAQUFADCBljELMAkG A1UEBhMCQ0gxDTALBgNVBAgTBFZhdWQxDjAMBgNVBAcTBVZldmV5MQ8wDQYDVQQK EwZOZXN0bGUxDjAMBgNVBAsTBUlTL0lUMRswGQYDVQQDExJOZXN0bGUgRXh0ZXJu YWwgQ0ExKjAoBgkqhkiG9w0BCQEWG3BraS1zZWN1cml0eS1leHRAbmVzdGxlLmNv bTAeFw0xMzAxMTAxOTI3MTRaFw0xODAxMDkxOTI3MTRaMHUxCzAJBgNVBAYTAkNI MQ0wCwYDVQQIEwRWYXVkMQ4wDAYDVQQHEwVWZXZleTESMBAGA1UEChMJTmVzdGVj IFNBMQ4wDAYDVQQLEwVHbG9iZTEjMCEGA1UEAxMad3d3LnNvbnJpc2EubmVzY2Fm ZS5jb20ubXgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6fQxqnJpe YykYDDgVj0Y70I5j1OQcf92+bTI10j585A4BbRESkoYCHt0p04E2gRTp9/Ly3AqI bB/lRf7dMTTKCGbjasMJXaiT+1xhZtTAT/rqWOk8Lb7WncbOpZOdfVV0uVIynFti UrHREEMYzHxdo5RjpAtjr1z/sOOIB/+c7Jz9lUwVHR7iyY4+Fm7brul7xA26gDlo 4BEVgSmLy09kTJyJCsINQaKl47dzCmxi1beV7TGwI5Kym9Sqs9zyxFlBttnf5L4c +pACJHWxjX01KaaBxBPMjTnfdLDutXulTwd6R+yRZIcWDG1tFkTs7wpLOgZTDHIT L5stc6HeK0XVAgMBAAGjggGeMIIBmjALBgNVHQ8EBAMCBaAwRAYJKoZIhvcNAQkP BDcwNTAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIHMAoG CCqGSIb3DQMHMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBTgJeGbHRzW YfYwhVnj4F+g8eH5nzAfBgNVHSMEGDAWgBSrEprQYpY7ppWD7lQmqM3Xb3EL4jBE BgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLm5lc3RsZS5jb20vTmVzdGxlJTIw RXh0ZXJuYWwlMjBDQSgxKS5jcmwwTwYIKwYBBQUHAQEEQzBBMD8GCCsGAQUFBzAC hjNodHRwOi8vY3JsLm5lc3RsZS5jb20vTmVzdGxlJTIwRXh0ZXJuYWwlMjBDQSgx KS5jcnQwPAYJKwYBBAGCNxUHBC8wLQYlKwYBBAGCNxUIh6bQIoKMmAqG1YsMhZ66 G4TTlQ127/RpgpuaMAIBZAIBBzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMB MA0GCSqGSIb3DQEBBQUAA4ICAQCqCQhf2pMVz6Kzo5C1FnvN/HZbKwDk6bx4km5E 8cSk7tYcQ3zO8PaTJBduPRPmAClXEmAWpzZNZ88+4yXiRnI5K7YWdQPvnqzR2JcV NmZKzfa4DPYzSsr2b8JsF9JkWDx8HcS6hbS1oUaVnz5xWB0gfkTDcHdAN2MT+OUF WhuZJSG+X0RLkZ3UjwE6Lfz2ClI29BmshyyPShiUdQfA3urOy4oWCEx0SFatiNkX EdmHuDoJxdL2yWXLf0Oa3ufX5my33JzTDRUSBfk8RO30lLzrC4XhX8UKgYaox8Rd hJWE+UGuSSsrZIQ9d13HzOMrsHHpkZk1Q13ZpFWjWOGjU6SPVLFbp8heI7c1sHm0 +xXAziNxrZDcJFSYmxYm2qhlgYyublYY/H+rvj8LAQ9rD1TvRFMSR46wGSALdkIQ aiu+Fr9qFDqm5WfHuRdq6bLYgflfFabePCOEneMDPalqPU96KQTyto9S3phKQykO 8A/qxHthXIeYyWP0J+HDrrkeM4uSE5iapwos8km9IQhE6cSt6IiKKIWqTvoml4wZ YK/+WGbWXMFjIbp8f4UelTob2TYeuJ2BMR0ghMoL0urcOPV/QcWha+d/HwfFS+t1 z3hV5+33WGyLYkyKJMBpeFr079mtVxXz8H60BU5Vh/Ix+ntZu9DmnbaQAjcEk3b2 p65zQg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+n0MapyaXmMpGAw4FY9G O9COY9TkHH/dvm0yNdI+fOQOAW0REpKGAh7dKdOBNoEU6ffy8twKiGwf5UX+3TE0 yghm42rDCV2ok/tcYWbUwE/66ljpPC2+1p3GzqWTnX1VdLlSMpxbYlKx0RBDGMx8 XaOUY6QLY69c/7DjiAf/nOyc/ZVMFR0e4smOPhZu267pe8QNuoA5aOARFYEpi8tP ZEyciQrCDUGipeO3cwpsYtW3le0xsCOSspvUqrPc8sRZQbbZ3+S+HPqQAiR1sY19 NSmmgcQTzI0533Sw7rV7pU8HekfskWSHFgxtbRZE7O8KSzoGUwxyEy+bLXOh3itF 1QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 201262892156687929580341 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS/IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle External CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-10 19:27:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-09 19:27:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestec SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Globe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sonrisa.nescafe.com.mx' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31621239955973535585605922589994837899995606918741322298059618773548938081456195134370205912586734568341595991456227435093956329861202191683756319241665949025442857601261707752313697156169451714541622113571838640358853924744265093828122287528466437322908073182924099840212035685490266514276581231554294564490528432084427402245529802200718327482817400829841620920227484769842214841155045929973099304552215659805705058578485682212646511613708101826495618538581596502739246918712488830038433898377470681874814095078698049485396070383674913188880389384795191778370345105335989805566697824911196129343714833880313911526869 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e025e19b1d1cd661f6308559e3e05fa0f1e1f99f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab129ad062963ba69583ee5426a8cdd76f710be2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15312930.4393994.13976972.10984731.9751181.118.1833577.4640048 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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