sys8.texasattorneygeneral.gov

- Texas Office of the Attorney General -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 7f:7d:3e:87:5c:42:f6:ca:70:88:b6:db:0b:35:58:9d was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Texas Office of the Attorney General

Organization: Texas Office of the Attorney General
State / Province: Texas
Locality: Austin
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7f:7d:3e:87:5c:42:f6:ca:70:88:b6:db:0b:35:58:9d
Serial Number (int): 169462260805752110585766001406014478493
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: bc:62:db:31:01:ca:41:3f:b6:23:b1:97:a5:10:05:60:0c:58:f4:b5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 4e:af:02:39:81:cc:f1:05:92:cf:73:fe:f9:b0:13:cb:45:59:02:1d
Fingerprint (sha256): ae:97:08:2f:2f:45:5a:49:cf:be:f2:20:1c:e8:72:78:15:57:12:ba:19:54:8d:5c:78:43:ee:92:65:fe:9f:f2

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sys8.texasattorneygeneral.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sys8.texasattorneygeneral.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sys8.texasattorneygeneral.gov

Other certificates including the domain name texasattorneygeneral.gov

(limited to 100 certificates)
txcses.texasattorneygeneral.gov
*.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
www.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
csinfo.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
elearning.texasattorneygeneral.gov
events.texasattorneygeneral.gov
www.texasattorneygeneral.gov
webmail.texasattorneygeneral.gov
elearning.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
*.texasattorneygeneral.gov
sys2.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
csrsa.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
csvpn2.texasattorneygeneral.gov
events.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
csvpn.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
oag-arms2.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
csvpn.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
airwatchcs.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
kioskpromgmt.texasattorneygeneral.gov
*.texasattorneygeneral.gov
*.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
sys8.texasattorneygeneral.gov
*.texasattorneygeneral.gov
sesami.texasattorneygeneral.gov
*.texasattorneygeneral.gov
portal.cs.oag.state.tx.us
csvpn2.texasattorneygeneral.gov
airwatchcs.texasattorneygeneral.gov
csvpn2.texasattorneygeneral.gov
*.texasattorneygeneral.gov
texasattorneygeneral.gov
csrsa.texasattorneygeneral.gov
sys8.texasattorneygeneral.gov
texasattorneygeneral.gov
*.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov
cvs.texasattorneygeneral.gov
txcses.texasattorneygeneral.gov

Certificate

The complete raw certificate details for sys8.texasattorneygeneral.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIQf30+h1xC9spwiLbbCzVYnTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MzEyMDgxMzIyMzFaFw0yNTAxMDcxMzIyMzBaMIGFMQswCQYDVQQGEwJVUzEOMAwG
A1UECBMFVGV4YXMxDzANBgNVBAcTBkF1c3RpbjEtMCsGA1UEChMkVGV4YXMgT2Zm
aWNlIG9mIHRoZSBBdHRvcm5leSBHZW5lcmFsMSYwJAYDVQQDEx1zeXM4LnRleGFz
YXR0b3JuZXlnZW5lcmFsLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ4RLAJiPC5SQTJpKlrJRN8hZ6nTmUvzoGDPfw7gypBl2hIgz0Q2tMZJhOpG
DmYflh/iMMxaBlHi3wkABV0Sjdb4Ko4qRdaNStyrARHm+gh7n3QZG5mVwfSp6chc
+Gtw+Sy8TgxtbFTitagR3DLtb4vaiPSEJ00lDmwhdurbEk2kb6bC5/+Zyq/Sh42f
ZXT+rQiK4EN5uXkp2okP3oGJzbiHRuBz2pmf3+7BzCGRFnkzSkL5hce0ZxjJNMlG
bPZ8T+EpOcuPLFr6+TG/KrflFxhQPHa/nuntJ3mJoCtpbtBT3/KGVHYJ0NHNWNYq
dvOU7a0CYkaHGqlWUeOc8/tP/n0CAwEAAaOCAWowggFmMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFLxi2zEBykE/tiOxl6UQBWAMWPS1MB8GA1UdIwQYMBaAFIKicHTd
vFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0
cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50
cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMCgGA1UdEQQhMB+CHXN5czgu
dGV4YXNhdHRvcm5leWdlbmVyYWwuZ292MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUE
DDAKBggrBgEFBQcDATATBgNVHSAEDDAKMAgGBmeBDAECAjATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStkyXazRR3I9pUADTIRv20mJeeT+
j5pJ7NBNkgn5E9PM+NlD9bfLEtNT92rAGIhxePiWWMe+3dX7I0TO/ZTv8ZDTeFTv
yZECHTLGkqeyup8Zt4J1ReJ1pBjTnnJH6/BIcgfuQwGKR6lUprWf/EXolVFcg/Hy
ONW+rjpfm+p3Y3Js4EMZWVVFCdSskmvrQsiwzjSdOQWuCgZq+s0HD6JWbR3zwKQh
KrGEdS0f/PfBhxWfHoioO/RREr8hHmrL1njyarE89UG8Danv+cFv3VM01vS+Ylfi
2GSEcrfOr4HpgaVoL3AjL8vwIAIRKy6qTzcFdrLGuZVtt/5ZdvEBP0aa4w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhEsAmI8LlJBMmkqWslE
3yFnqdOZS/OgYM9/DuDKkGXaEiDPRDa0xkmE6kYOZh+WH+IwzFoGUeLfCQAFXRKN
1vgqjipF1o1K3KsBEeb6CHufdBkbmZXB9KnpyFz4a3D5LLxODG1sVOK1qBHcMu1v
i9qI9IQnTSUObCF26tsSTaRvpsLn/5nKr9KHjZ9ldP6tCIrgQ3m5eSnaiQ/egYnN
uIdG4HPamZ/f7sHMIZEWeTNKQvmFx7RnGMk0yUZs9nxP4Sk5y48sWvr5Mb8qt+UX
GFA8dr+e6e0neYmgK2lu0FPf8oZUdgnQ0c1Y1ip285TtrQJiRocaqVZR45zz+0/+
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169462260805752110585766001406014478493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 13:22:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 13:22:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas Office of the Attorney General'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sys8.texasattorneygeneral.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19954119969733884868873992538634926809490939444671108609795337067835694100857504567327748770981674696090505418754609035431880044020594751439736670491011401720932091324561010090815398771112720704478555360558840255820673634645094353345282143758042697797883870871861100771082138290386425931253089202541684112349147166146348282917906207327205821577666897021562741014311869456072503397403215780649612369981831624501979916165633053244073937821750514688971541154218013940748147350819559068845454881185846402275088245474535006095503228789657823253415862114350781807400560386069527438876798809564937790021353477246543528459901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc62db3101ca413fb623b197a51005600c58f4b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sys8.texasattorneygeneral.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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