vpn.dfki.de

Issued by DFKI-CA - G01

About this certificate


This digital certificate with serial number 1a:8a:42:aa:ac:db:6a was issued on by Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH

Organization: Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH
Organization unit: ISG-SB
State / Province: Rheinland-Pfalz
Locality: Kaiserslautern
Country: DE

Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH

Organization: Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH
Organization unit: ISG
State / Province: Rheinland-Pfalz
Locality: Kaiserslautern
Country: DE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 1a:8a:42:aa:ac:db:6a
Serial Number (int): 7470368330406762
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 0a:71:06:46:a5:ff:2a:48:a7:fa:7f:e0:b6:97:be:70:c2:f4:33:46
AuthorityKeyId: b0:43:d9:01:d3:78:cc:58:ad:87:14:f2:d4:3a:48:aa:70:71:4a:ec

Fingerprint (sha1): e6:a6:11:f3:f4:39:3b:5d:64:5c:23:b5:03:16:6b:81:8c:ba:cf:61
Fingerprint (sha256): 4d:08:4d:7a:84:a4:3e:d4:2d:ff:54:ab:6b:c4:fc:9e:51:cf:0f:ea:44:5d:57:d4:a4:81:7a:b1:7e:45:d2:bd

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfki-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfki-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfki-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfki-ca/pub/crl/cacrl.crl

Check the revocation status for the current certificate on vpn.dfki.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.dfki.de
vpn2.sb.dfki.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgIHGopCqqzbajANBgkqhkiG9w0BAQsFADCBljELMAkGA1UE BhMCREUxRjBEBgNVBAoTPURldXRzY2hlcyBGb3JzY2h1bmdzemVudHJ1bSBmdWVy IEt1ZW5zdGxpY2hlIEludGVsbGlnZW56IEdtYkgxDDAKBgNVBAsTA0lTRzEWMBQG A1UEAxMNREZLSS1DQSAtIEcwMTEZMBcGCSqGSIb3DQEJARYKY2FAZGZraS5kZTAe Fw0xNTEyMTExMjQ0MTFaFw0xOTAzMDkxMjQ0MTFaMIGvMQswCQYDVQQGEwJERTEY MBYGA1UECAwPUmhlaW5sYW5kLVBmYWx6MRcwFQYDVQQHDA5LYWlzZXJzbGF1dGVy bjFGMEQGA1UECgw9RGV1dHNjaGVzIEZvcnNjaHVuZ3N6ZW50cnVtIGZ1ZXIgS3Vl bnN0bGljaGUgSW50ZWxsaWdlbnogR21iSDEPMA0GA1UECwwGSVNHLVNCMRQwEgYD VQQDDAt2cG4uZGZraS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKqX29uBydasHYix90mDbcRm7AuGuM2kcHE2do2tEWwOofWlvJuONIcPwMpfnAWa R6I+jbTiQqNBxwm0s+SPERzJ0erebkzNGv4L/6Rn7iMhcwIPZS2rK6iwcs0XXyFT UYiipdRJOXTTATsdMM+h6CEw5J+KvBDX84AqFZxDVuHPvPN8HLFjt85IelRW7NL2 B/tW3Qa2QuL9vNFt6VMPvwzhql2l77WHzxYJWosMFBcoUbalR4XidTF/VdG85daK 51c34pluq/3yNMyKmvIFibHGyTmmT+/aZnyQf4OwRa9b/Ub9DQSsg7Q3QUNiQXHX iBQyAjJRRnTT5LhTvLoYYksCAwEAAaOCAjwwggI4MAkGA1UdEwQCMAAwCwYDVR0P BAQDAgXgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBQKcQZGpf8qSKf6 f+C2l75wwvQzRjAfBgNVHSMEGDAWgBSwQ9kB03jMWK2HFPLUOkiqcHFK7DAnBgNV HREEIDAeggt2cG4uZGZraS5kZYIPdnBuMi5zYi5kZmtpLmRlMHkGA1UdHwRyMHAw NqA0oDKGMGh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZraS1jYS9wdWIvY3JsL2Nh Y3JsLmNybDA2oDSgMoYwaHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZmtpLWNhL3B1 Yi9jcmwvY2FjcmwuY3JsMIHJBggrBgEFBQcBAQSBvDCBuTAzBggrBgEFBQcwAYYn aHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEAGCCsGAQUF BzAChjRodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rma2ktY2EvcHViL2NhY2VydC9j YWNlcnQuY3J0MEAGCCsGAQUFBzAChjRodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rm a2ktY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MFkGA1UdIARSMFAwEQYPKwYBBAGB rSGCLAEBBAMEMBEGDysGAQQBga0hgiwCAQQDATAPBg0rBgEEAYGtIYIsAQEEMA0G CysGAQQBga0hgiweMAgGBmeBDAECAjANBgkqhkiG9w0BAQsFAAOCAQEAFaKB8n2u gLMMw1LU9ToaYTuHPNEUJqywSg0skm+3Krp433he2OJ6/8Wl3eVxikTt3CYHXX9o aasVTWSPqBKJvnCXJOZLRNEN1g5WsB1TE1uDNnnlGg8W9J4A9CIeuqjxmr9VFbqN /dQbuZsv1tqOValR2W96/UH83cl4UTPTOHqQiy/9lyPzhmmJCo0unv8R7ppYzk93 Jwg9Zf+M9cnnAPUtz5PIHnkotRlbYZTcQ2w/f026lam44CF/SQEFoXLfRIN4Gj5S 5/9Ot8xkSrclSqo4GsJYxr4wC70cvik4IUhkhQjziT8RvTb4s1LNtbUznaWCKwWx wGc7Wa2D6hakMg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpfb24HJ1qwdiLH3SYNt xGbsC4a4zaRwcTZ2ja0RbA6h9aW8m440hw/Ayl+cBZpHoj6NtOJCo0HHCbSz5I8R HMnR6t5uTM0a/gv/pGfuIyFzAg9lLasrqLByzRdfIVNRiKKl1Ek5dNMBOx0wz6Ho ITDkn4q8ENfzgCoVnENW4c+883wcsWO3zkh6VFbs0vYH+1bdBrZC4v280W3pUw+/ DOGqXaXvtYfPFglaiwwUFyhRtqVHheJ1MX9V0bzl1ornVzfimW6r/fI0zIqa8gWJ scbJOaZP79pmfJB/g7BFr1v9Rv0NBKyDtDdBQ2JBcdeIFDICMlFGdNPkuFO8uhhi SwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7470368330406762 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ISG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFKI-CA - G01' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-11 12:44:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 12:44:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaiserslautern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsches Forschungszentrum fuer Kuenstliche Intelligenz GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ISG-SB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.dfki.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21535396218443903550555497409785032461383992374974946544669715660571758863797326740006539836146584279686574196942445283269364594885773290808427562801715045501388962664086568728711773740093712997169635877646298643695001222406904573016473408379624437056290211382862826727240715240849416008054904794383130078373347468497648978479904319859527200901581817559623583773446854087307465208856555792221199076087336385006546996747496670036853720360746559794512170861969295272113493953027487945564400548511345734789590758835397751582997749240692142064400411672167263339029617327224549313425622036360262191951066589185997354328651 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0a710646a5ff2a48a7fa7fe0b697be70c2f43346 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b043d901d378cc58ad8714f2d43a48aa70714aec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.dfki.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn2.sb.dfki.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfki-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfki-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfki-ca/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfki-ca/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0015a281f27dae80b30cc352d4f53a1a613b873cd11426acb04a0d2c926fb72aba78df785ed8e27affc5a5dde5718a44eddc26075d7f6869ab154d648fa81289be709724e64b44d10dd60e56b01d53135b833679e51a0f16f49e00f4221ebaa8f19abf5515ba8dfdd41bb99b2fd6da8e55a951d96f7afd41fcddc9785133d3387a908b2ffd9723f38669890a8d2e9eff11ee9a58ce4f7727083d65ff8cf5c9e700f52dcf93c81e7928b5195b6194dc436c3f7f4dba95a9b8e0217f490105a172df4483781a3e52e7ff4eb7cc644ab7254aaa381ac258c6be300bbd1cbe29382148648508f3893f11bd36f8b352cdb5b5339da5822b05b1c0673b59ad83ea16a432