services.bjca.org.cn

Issued by GlobalSign Extended Validation CA - G2

About this certificate


This digital certificate with serial number 11:21:84:5e:01:09:de:50:05:b6:68:53:f3:2b:26:69:77:49 was issued on by GlobalSign nv-sa .

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

北京数字证书认证中心有限公司

Company registration number: 110000001966505
Organization: 北京数字证书认证中心有限公司
Organization unit: SSL
Address: 北京市海淀区北四环西路68号1501号
State / Province: 北京
Locality: 北京
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: 北京
Locality: 北京
Country: CN

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:84:5e:01:09:de:50:05:b6:68:53:f3:2b:26:69:77:49
Serial Number (int): 1492314125140727738935420652680128613676873
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 51:40:9c:f6:12:c8:bb:04:fa:70:e3:33:25:eb:d6:3a:50:2f:8e:f1
AuthorityKeyId: b0:b0:4a:fd:1c:75:28:f8:1c:61:aa:13:f6:fa:c1:90:3d:6b:16:a3

Fingerprint (sha1): f4:5a:8a:4e:e4:8f:31:48:f0:32:da:8c:f9:50:b0:97:a5:e3:97:65
Fingerprint (sha256): c1:81:bb:ac:a3:91:74:77:7d:54:52:5e:15:3a:bf:99:65:d6:22:5f:53:d1:ce:df:fe:c9:78:0a:ad:a3:1e:ef

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalg2.crl

Check the revocation status for the current certificate on services.bjca.org.cn
10
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

services.bjca.org.cn
timestamp.bjca.org.cn
Ldap.bjca.org.cn
Ocsp.bjca.org.cn
Bjraweb.bjca.org.cn
Bjtax.bjca.org.cn
gmanager.bjca.org.cn
Graweb.bjca.org.cn
manager.bjca.org.cn
www.bjca.org.cn

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgISESGEXgEJ3lAFtmhT8ysmaXdJMA0GCSqGSIb3DQEBBQUA MFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS8wLQYD VQQDEyZHbG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBHMjAeFw0x MTA5MjcxMDI4MjhaFw0xMzEwMzEwNzI1MDRaMIIBMTEdMBsGA1UEDwwUUHJpdmF0 ZSBPcmdhbml6YXRpb24xGDAWBgNVBAUTDzExMDAwMDAwMTk2NjUwNTETMBEGCysG AQQBgjc8AgEDEwJDTjEYMBYGCysGAQQBgjc8AgECEwdCZWlqaW5nMQswCQYDVQQG EwJDTjEPMA0GA1UECAwG5YyX5LqsMQ8wDQYDVQQHDAbljJfkuqwxNjA0BgNVBAkM LeWMl+S6rOW4gua1t+a3gOWMuuWMl+Wbm+eOr+ilv+i3rzY45Y+3MTUwMeWPtzEM MAoGA1UECxMDU1NMMTMwMQYDVQQKDCrljJfkuqzmlbDlrZfor4HkuaborqTor4Hk uK3lv4PmnInpmZDlhazlj7gxHTAbBgNVBAMTFHNlcnZpY2VzLmJqY2Eub3JnLmNu MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h7DCna2tC7ZqEoQP6lh ixGK4WcSPmpxMHLU5J4v6/o75ujC5gxyUhnJ81h3aJd+gOQ+DeZpayru3Pa2KUSF vJDSCHFQXO8exMxgNosQ9HY9GEhUaH66g71FuXC3THyIP19hqCj8bnwfLME4M1WJ rI+JhYz+7ElSY70jy1nngaQL7HTkcTQCVSZcwkh5ZSi7Bw7lW4FfNEioRMNspudh 240YzHUQC2MNMqxuSyDi+6GlvxIFtxbSmoVMPgk6hzOBYhTgdLRSZ0T1VAZogOAt pwO9/F1Mz9vn/9z5vHXkw92b30Uot7WWUgyughaNT2b/DxwX6rlRT0FpDmVXxMZj 5wIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWgMEwGA1UdIARFMEMwQQYJKwYB BAGgMgEBMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29t L3JlcG9zaXRvcnkvMIHUBgNVHREEgcwwgcmCFHNlcnZpY2VzLmJqY2Eub3JnLmNu ghV0aW1lc3RhbXAuYmpjYS5vcmcuY26CEExkYXAuYmpjYS5vcmcuY26CEE9jc3Au YmpjYS5vcmcuY26CE0JqcmF3ZWIuYmpjYS5vcmcuY26CEUJqdGF4LmJqY2Eub3Jn LmNughRnbWFuYWdlci5iamNhLm9yZy5jboISR3Jhd2ViLmJqY2Eub3JnLmNughNt YW5hZ2VyLmJqY2Eub3JnLmNugg93d3cuYmpjYS5vcmcuY24wCQYDVR0TBAIwADAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYu aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc2V4dGVuZHZhbGcyLmNybDCB iAYIKwYBBQUHAQEEfDB6MEEGCCsGAQUFBzAChjVodHRwOi8vc2VjdXJlLmdsb2Jh bHNpZ24uY29tL2NhY2VydC9nc2V4dGVuZHZhbGcyLmNydDA1BggrBgEFBQcwAYYp aHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzZXh0ZW5kdmFsZzIwHQYDVR0O BBYEFFFAnPYSyLsE+nDjMyXr1jpQL47xMB8GA1UdIwQYMBaAFLCwSv0cdSj4HGGq E/b6wZA9axajMA0GCSqGSIb3DQEBBQUAA4IBAQCLA2Qgjo1z7zMm4oDz0m68dF87 oWrHdir4M4qeC2+TYIMxaqykgv/jLYotWThdUbWRdr4HtksjnWoF/RZHYnYnVQK2 9ornstRFk4HtcsGEfldkfysHcLo3aIogbXIfD6hKg/cuo74WtpvthyXa8vuixvMx rORtCJ5cJGMp2jvG+LrLj1mTuNJS04KDVn6lvyZqd6PdNCx4CzHrDtvKEKHakUm/ hBtpPstQN8cTyepGI/vqA7g63iN4p9d2U/xSg4nqht5W9/Uebm64Rz5rUodc8MUU SSWRlbJoz3BpD4s2iOm/oAjqZfYFl5s9r+o0eLe7cEpAtaFYufUdX9jdUHPC -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h7DCna2tC7ZqEoQP6lh ixGK4WcSPmpxMHLU5J4v6/o75ujC5gxyUhnJ81h3aJd+gOQ+DeZpayru3Pa2KUSF vJDSCHFQXO8exMxgNosQ9HY9GEhUaH66g71FuXC3THyIP19hqCj8bnwfLME4M1WJ rI+JhYz+7ElSY70jy1nngaQL7HTkcTQCVSZcwkh5ZSi7Bw7lW4FfNEioRMNspudh 240YzHUQC2MNMqxuSyDi+6GlvxIFtxbSmoVMPgk6hzOBYhTgdLRSZ0T1VAZogOAt pwO9/F1Mz9vn/9z5vHXkw92b30Uot7WWUgyughaNT2b/DxwX6rlRT0FpDmVXxMZj 5wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492314125140727738935420652680128613676873 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-09-27 10:28:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-31 07:25:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110000001966505' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京市海淀区北四环西路68号1501号' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京数字证书认证中心有限公司' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services.bjca.org.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28040072950076448880608724048282959289706721695071135094343966297388487537123139761188434576638835964529945960102107145093514646382967187406132337436350643832173953643176301237367265969328581941714357861177453191494323576293227292931361316019098108968916588743689900390442468504885742677994515368828826902614262946951662854074921907992921431094715658987056714767755019147957060905098885587911370139435690267580155953307765763382481676188358873239081608156169126417777270801072088058156879611779801433134046472265338993727566614670039838471721046493871946657867072419015703595829452545929171801294154162305196756460519 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (204 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timestamp.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Ldap.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Ocsp.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Bjraweb.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Bjtax.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmanager.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Graweb.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager.bjca.org.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bjca.org.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalg2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51409cf612c8bb04fa70e33325ebd63a502f8ef1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b0b04afd1c7528f81c61aa13f6fac1903d6b16a3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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