mycom-sgp.comproof.net

- COMMERZBANK AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 61:96:01:99:cd:65:da:3a:a0:10:cb:5f was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMMERZBANK AG

Organization: COMMERZBANK AG
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:96:01:99:cd:65:da:3a:a0:10:cb:5f
Serial Number (int): 30201392385131467885467716447
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c4:cb:80:da:c9:75:cb:b6:72:27:d2:bf:b8:e1:61:54:47:59:31:1f
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 22:e2:e6:b2:cf:54:e4:47:4e:c0:26:7c:f1:07:51:69:ab:bb:33:6c
Fingerprint (sha256): b2:b6:83:e4:bb:de:18:4b:46:12:1c:8a:d5:ad:cf:17:6e:10:2c:f7:4b:6c:c2:a5:42:7e:0f:55:c9:4b:bd:02

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate mycom-sgp.comproof.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycom-sgp.comproof.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycom-sgp.comproof.net
partner-sgp.comproof.net
mycom-sgp-dr.comproof.net
partner-sgp-dr.comproof.net

Other certificates including the domain name comproof.net

(limited to 100 certificates)
box.comproof.net
access.comproof.net
portal.comproof.net
eu.comproof.net
mycom-uat.comproof.net
mycom.comproof.net
rsasts.comproof.net
capcom.comproof.net
b1.comproof.net
lu.comproof.net
mycloud.comproof.net
mycom.comproof.net
rsasts.comproof.net
mycom-sgp.comproof.net
mycom-sgp.comproof.net
portaluat.comproof.net
lu.comproof.net
d1.comproof.net
mycom-nyc.comproof.net
mycom.comproof.net
mycom-nyc.comproof.net
eu.comproof.net
portal.comproof.net
access.comproof.net
portal.comproof.net
eu.comproof.net
access.comproof.net
mycom.comproof.net
mycom-sgp.comproof.net
access.comproof.net
eu.comproof.net
mycom-sgp.comproof.net
eu.comproof.net
d1.comproof.net
capcom.comproof.net
workplace.comproof.net
mycom-nyc.comproof.net
mycloud.comproof.net
mycom-nyc.comproof.net
c2.comproof.net
partner-sgp.comproof.net
access.comproof.net
mycom.comproof.net
b1.comproof.net
box.comproof.net
mycom.comproof.net
eu.comproof.net

Certificate

The complete raw certificate details for mycom-sgp.comproof.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG6TCCBdGgAwIBAgIMYZYBmc1l2jqgEMtfMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMjA1MTcxMTAxMDJaFw0y
MzA2MTgxMTAxMDFaMHQxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZIZXNzZW4xGjAY
BgNVBAcTEUZyYW5rZnVydCBhbSBNYWluMRcwFQYDVQQKEw5DT01NRVJaQkFOSyBB
RzEfMB0GA1UEAxMWbXljb20tc2dwLmNvbXByb29mLm5ldDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOwx2ZxDi0qLg0rOkGkF88xtDbzLgmwqOs/4/pVi
zCUHp87+kC9QxoEbKgzHkoQUHuFLXHLf2mZOHnSYFxKxO2rNsOEXl6x545qdRma0
DoAgcfl1LXwZ567JSPkzvW5p4pdCjAGqi3NyNor0mLRD7ojEeq76zWPX7Dg2iNzo
zt0UCSO6GamvSOooHlXvIVxgtemwtbf6zC/3AUYsEiKMdC16UqZ2C+AwFbMLJ0EX
QC76tZ7SUA1Jgp25P/tFALxDQOQ2Xqe9XzNG1NLnXnlpx+2x/j5d8N7vbyLHNqZJ
DMmuNJ268U1r+4vylMmsf/uTOqNnvS2tt6S3po3r2O+YlBMCAwEAAaOCA50wggOZ
MA4GA1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4
aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNh
MjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29t
L2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggr
BgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8w
CAYGZ4EMAQICMAkGA1UdEwQCMAAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2Ny
bC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNybDBzBgNVHREEbDBq
ghZteWNvbS1zZ3AuY29tcHJvb2YubmV0ghhwYXJ0bmVyLXNncC5jb21wcm9vZi5u
ZXSCGW15Y29tLXNncC1kci5jb21wcm9vZi5uZXSCG3BhcnRuZXItc2dwLWRyLmNv
bXByb29mLm5ldDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0j
BBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFMTLgNrJdcu2cifS
v7jhYVRHWTEfMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgDoPtDaPvUGNTLn
Vyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYDRrbJ0AAAEAwBHMEUCIHnDQUKsXTpu
aJ13kf0EOpND8RfDV7pl/lmF3nJE69ltAiEA9sagharm+U9xtDFQO+CFKqoQ7Z5H
xUbmQlZ/NazghI0AdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAA
AYDRrbJiAAAEAwBGMEQCIATnWd8J7JMxCFgbfkH0b9wAnsffpScfQnCGkdpwYLQW
AiAWxxeOGXkhNdO5/rnuIO7rkxCaUyd0SRaHExqZx2v09QB1ALNzdwfhhFD4Y4bW
BancEQlKeS2xZwwLh9zwAw55NqWaAAABgNGtsosAAAQDAEYwRAIgIWT6Mgs6NCfy
XgiiFMmf0x2t0bPhjRGF+UokUnPrrfoCIBAhJmIoYjqUpTFGcmXEP0zrvPw6HPGZ
0Gla/TUNLZaYMA0GCSqGSIb3DQEBCwUAA4IBAQAMglJev5bSI1LllFt/7UFZ+djh
OpGqk56J0q51lttFJ7w7bq7rgWYHbWzuQvI2kNgIi5k8ixQ7zxP/BOG1JS8KuQA2
mrLJmpl+QZ9VSFtZm50JCdKuc9kA9QJ2fvbdA9yc+KvAluA4f1EiONpBwuheKDHo
EbLBu9PDmgJCxoYMmWNKgTouIHv13z4GtvO41X2WeFItjN76QWNH3bT72AjTa19D
tzbzCniAg+H5nWDfBqbLj/zyaKEZteKgtGPniOIjGw5bXyWztoHnGX9b4n5piSJ0
wE9aA7kOAYSt7AoElYS0MCPqxg69SRZbdx6X0a56BzpSICqKDT+4rcNSqlvH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DHZnEOLSouDSs6QaQXz
zG0NvMuCbCo6z/j+lWLMJQenzv6QL1DGgRsqDMeShBQe4Utcct/aZk4edJgXErE7
as2w4ReXrHnjmp1GZrQOgCBx+XUtfBnnrslI+TO9bmnil0KMAaqLc3I2ivSYtEPu
iMR6rvrNY9fsODaI3OjO3RQJI7oZqa9I6igeVe8hXGC16bC1t/rML/cBRiwSIox0
LXpSpnYL4DAVswsnQRdALvq1ntJQDUmCnbk/+0UAvENA5DZep71fM0bU0udeeWnH
7bH+Pl3w3u9vIsc2pkkMya40nbrxTWv7i/KUyax/+5M6o2e9La23pLemjevY75iU
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30201392385131467885467716447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-17 11:01:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-18 11:01:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMMERZBANK AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycom-sgp.comproof.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29816821943215502726718169331219715818225623085225024169614236303403997115927267741128173110809646892983970798441031683511775873189205297220805286353908072368238898908416013613638760636219051990967220966245923481137092452182685236595527795231859300636463227781923262603195685042027539354921911558931023706621161480458038326349546126447911935695196424984457895188990593702735977667330438761942446185925791721836375823229561651241997790060194984021797601522713700156363261699633058883652346273358426709008655001242559531020530804638924388775846673365281193964032779137933295667866137583663663599103505245821202712794131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycom-sgp.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-sgp.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycom-sgp-dr.comproof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-sgp-dr.comproof.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4cb80dac975cbb67227d2bfb8e161544759311f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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