newstag.nescafe-milano.com

Issued by Nestle External CA

About this certificate


This digital certificate with serial number 3d:72:76:98:00:01:00:00:3e:db was issued on by Nestle .

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Nestle

Organization: Nestle
Organization unit: GLOBE
State / Province: Vaud
Locality: Vevey
Country: CH

Nestle

Organization: Nestle
Organization unit: IS/IT
State / Province: Vaud
Locality: Vevey
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 3d:72:76:98:00:01:00:00:3e:db
Serial Number (int): 290175829859748477419227
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 06:da:41:62:c7:9e:fe:b0:c5:6d:88:7c:82:2e:67:71:1b:12:b4:c5
AuthorityKeyId: ab:12:9a:d0:62:96:3b:a6:95:83:ee:54:26:a8:cd:d7:6f:71:0b:e2

Fingerprint (sha1): a9:8c:46:dd:17:5c:f0:84:d4:7b:83:ab:77:03:62:75:85:97:ca:7a
Fingerprint (sha256): 7f:f2:a0:39:48:45:74:39:5d:32:ba:e2:ea:44:22:5d:de:2a:3d:66:eb:09:9f:8a:32:3c:fe:81:60:a7:c5:e0

Issuing Certificate URL: http://crl.nestle.com/Nestle%20External%20CA(1).crt

Revocation information

OCSP Server: http://ocsp.nestle.com/ocsp
CRL Distribution Point: http://crl.nestle.com/Nestle%20External%20CA(1).crl

Check the revocation status for the current certificate on newstag.nescafe-milano.com
9
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

newstag.nescafe-milano.com
newstag.nescafe-milano.ru
newstag.nescafe-milano.co.uk
newstag.nescafe-milano.mx
newstag.nescafe-milano.ro
newstag.nescafe-milano.se
newstag.nescafe-milano.dk
newstag.nescafe-milano.fi
newstag.nescafe-milano.no

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHFzCCBP+gAwIBAgIKPXJ2mAABAAA+2zANBgkqhkiG9w0BAQUFADCBljELMAkG A1UEBhMCQ0gxDTALBgNVBAgTBFZhdWQxDjAMBgNVBAcTBVZldmV5MQ8wDQYDVQQK EwZOZXN0bGUxDjAMBgNVBAsTBUlTL0lUMRswGQYDVQQDExJOZXN0bGUgRXh0ZXJu YWwgQ0ExKjAoBgkqhkiG9w0BCQEWG3BraS1zZWN1cml0eS1leHRAbmVzdGxlLmNv bTAeFw0xNDExMjgxMTE1MzZaFw0xNzExMjcxMTE1MzZaMHIxCzAJBgNVBAYTAkNI MQ0wCwYDVQQIEwRWYXVkMQ4wDAYDVQQHEwVWZXZleTEPMA0GA1UEChMGTmVzdGxl MQ4wDAYDVQQLEwVHTE9CRTEjMCEGA1UEAxMabmV3c3RhZy5uZXNjYWZlLW1pbGFu by5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2S1BxhWwVBvU RoOJ8AUKzih79aVhpvz55DyIFeszX6p3mkQIG2C8f5SptTLpc2xawo/2wgSqznsI gUBNq1U82QTcvFogNvllhT1e7PKYojJVEaCcZ4wIPdBpQjXRxgco1j9S8FLlIEx0 UYfMkW26tN8b+JOXhLh1n4GsWE+MHurmtAPqdFCnbi8xeu/89gpON7/v1+OrYJ4f wedVsHkMoC0D+TGqKc+sVhPCcB8yH7U0TOHtuOxByE6gd5eKmyZGLEh8ribQpWAe BoWp2DjNfo5dY7LMgfl+JP8XPbzDGscSnUCQqVIxzsXOLv5AZkz8Go9PFszyU4S2 CIx59V1VAgMBAAGjggKIMIIChDALBgNVHQ8EBAMCBaAwggECBgNVHREEgfowgfeC Gm5ld3N0YWcubmVzY2FmZS1taWxhbm8uY29tghluZXdzdGFnLm5lc2NhZmUtbWls YW5vLnJ1ghxuZXdzdGFnLm5lc2NhZmUtbWlsYW5vLmNvLnVrghluZXdzdGFnLm5l c2NhZmUtbWlsYW5vLm14ghluZXdzdGFnLm5lc2NhZmUtbWlsYW5vLnJvghluZXdz dGFnLm5lc2NhZmUtbWlsYW5vLnNlghluZXdzdGFnLm5lc2NhZmUtbWlsYW5vLmRr ghluZXdzdGFnLm5lc2NhZmUtbWlsYW5vLmZpghluZXdzdGFnLm5lc2NhZmUtbWls YW5vLm5vMB0GA1UdDgQWBBQG2kFix57+sMVtiHyCLmdxGxK0xTAfBgNVHSMEGDAW gBSrEprQYpY7ppWD7lQmqM3Xb3EL4jBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8v Y3JsLm5lc3RsZS5jb20vTmVzdGxlJTIwRXh0ZXJuYWwlMjBDQSgxKS5jcmwweAYI KwYBBQUHAQEEbDBqMD8GCCsGAQUFBzAChjNodHRwOi8vY3JsLm5lc3RsZS5jb20v TmVzdGxlJTIwRXh0ZXJuYWwlMjBDQSgxKS5jcnQwJwYIKwYBBQUHMAGGG2h0dHA6 Ly9vY3NwLm5lc3RsZS5jb20vb2NzcDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3 FQiHptAigoyYCobViwyFnrobhNOVDXaE6swLgcXcQgIBZAIBCzATBgNVHSUEDDAK BggrBgEFBQcDATAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMBMA0GCSqGSIb3 DQEBBQUAA4ICAQA0xoDYu2DuvZdW/T0RU30Kay78PR29GhlucWRFXD8O36gAdCZQ Aacr6JSsU+HO1wlpd7tl5T9yqQkR4yaTM/rWPVOF5v9GaL7XNHcCdrDBvjuBa6Fn vTuVMsiT5J/RMhqbpvdTQgI0jj9p3vMdRRmB9y7P0hCAyxrZ6qE5xztOIW4nTO8S s8U13IcquV92G7H36D7kGIAHM9IjI2iKslzUSDCBOXSX6aqcoWn6tCQWsrPadfDi vHJ8d7cyy1hIWlLxi6aaok/+Cb6MU7WrHGA1EAnYowLup57aCloolndIpqSq5IMp xHrAicLXD/sISgNcH9Eqnd09CSOlEXndOp0b840/WF5Lnl8twAXktTNcEyWKFTin kAoFc9bqQDPkOW6CXtY+g+6dNpT6FnrEXvF2CRUoJVy3cW3U6Ki6vpuK6sx7G+9u wvQ8OB4SDqiWUrVv3/bM9LesQbxOWjdtFJtbulOg2K6Aw9KdHgGsSHkCMBRSV/9P odhI/Aoz7r2/e7lEyCygvYgvIj+Ys2zUgt1OL3hUzImAk+ZO5hfjSHGJ86Uqnta3 TLJHnJ4OV6tyot8FO/KYvml2TlfbUWjhyuBpZIfyOUSHAh2/HcB8hMV3LFiY56Xm 93CamB/36QIriIQNyvckL3ZCxzX4yJnkNZurNW47dTuBl6AROaZEJ7liXw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstktQcYVsFQb1EaDifAF Cs4oe/WlYab8+eQ8iBXrM1+qd5pECBtgvH+UqbUy6XNsWsKP9sIEqs57CIFATatV PNkE3LxaIDb5ZYU9XuzymKIyVRGgnGeMCD3QaUI10cYHKNY/UvBS5SBMdFGHzJFt urTfG/iTl4S4dZ+BrFhPjB7q5rQD6nRQp24vMXrv/PYKTje/79fjq2CeH8HnVbB5 DKAtA/kxqinPrFYTwnAfMh+1NEzh7bjsQchOoHeXipsmRixIfK4m0KVgHgaFqdg4 zX6OXWOyzIH5fiT/Fz28wxrHEp1AkKlSMc7Fzi7+QGZM/BqPTxbM8lOEtgiMefVd VQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290175829859748477419227 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS/IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle External CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-28 11:15:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-27 11:15:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GLOBE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newstag.nescafe-milano.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22577512148024780321084099261046435816678235256585943488808509205185302559502815030791049423291808136883407020819106673580891677251752947598480684633144013796345362450036571901649335794913488691169439574017850487983176505980996173082549956146973330605221595154165179449294375682633582268197295132156592810829693929978590358066151301379698886861262356497478174042210241085176213095931659853445194176394346466017500863212939869631849139735140932946105051038246260665438135796346149799620482686106773849918048841284814533563478938475809752910455442520539006564517460945073054150237103722165462145294583870986427250859349 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (250 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstag.nescafe-milano.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06da4162c79efeb0c56d887c822e67711b12b4c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab129ad062963ba69583ee5426a8cdd76f710be2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.nestle.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15312930.4393994.13976972.10984731.9751181.118.10135051.3239490 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 11 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0034c680d8bb60eebd9756fd3d11537d0a6b2efc3d1dbd1a196e7164455c3f0edfa80074265001a72be894ac53e1ced7096977bb65e53f72a90911e3269333fad63d5385e6ff4668bed734770276b0c1be3b816ba167bd3b9532c893e49fd1321a9ba6f7534202348e3f69def31d451981f72ecfd21080cb1ad9eaa139c73b4e216e274cef12b3c535dc872ab95f761bb1f7e83ee418800733d22323688ab25cd4483081397497e9aa9ca169fab42416b2b3da75f0e2bc727c77b732cb58485a52f18ba69aa24ffe09be8c53b5ab1c60351009d8a302eea79eda0a5a28967748a6a4aae48329c47ac089c2d70ffb084a035c1fd12a9ddd3d0923a51179dd3a9d1bf38d3f585e4b9e5f2dc005e4b5335c13258a1538a7900a0573d6ea4033e4396e825ed63e83ee9d3694fa167ac45ef176091528255cb7716dd4e8a8babe9b8aeacc7b1bef6ec2f43c381e120ea89652b56fdff6ccf4b7ac41bc4e5a376d149b5bba53a0d8ae80c3d29d1e01ac48790230145257ff4fa1d848fc0a33eebdbf7bb944c82ca0bd882f223f98b36cd482dd4e2f7854cc898093e64ee617e3487189f3a52a9ed6b74cb2479c9e0e57ab72a2df053bf298be69764e57db5168e1cae0696487f2394487021dbf1dc07c84c5772c5898e7a5e6f7709a981ff7e9022b88840dcaf7242f7642c735f8c899e4359bab356e3b753b8197a01139a64427b9625f