*.eos-shanxi-1.cmecloud.cn

- 中移（苏州）软件技术有限公司 -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 6a:10:22:77:b1:7f:43:dd:80:4b:65:97:65:53:d3:ed was issued on by UniTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

中移（苏州）软件技术有限公司

Organization: 中移（苏州）软件技术有限公司
State / Province: 江苏省
Locality: 苏州市
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 6a:10:22:77:b1:7f:43:dd:80:4b:65:97:65:53:d3:ed
Serial Number (int): 140981943387948203926109146155794551789
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 11:13:cf:61:d0:fb:76:4d:f9:ed:35:ba:63:12:88:2f:b4:10:ba:69
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): ba:24:79:86:16:9e:bc:8e:24:40:3d:13:fa:68:81:de:d7:c3:44:6b
Fingerprint (sha256): b9:7e:1c:55:a5:51:46:c2:24:22:0d:30:ae:cc:58:b2:9b:8b:e1:f5:67:c8:fb:0d:07:89:50:c7:47:c1:3b:c1

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate *.eos-shanxi-1.cmecloud.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eos-shanxi-1.cmecloud.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eos-shanxi-1.cmecloud.cn
eos-shanxi-1.cmecloud.cn
*.eos-shanxi-1-internal.cmecloud.cn
eos-shanxi-1-internal.cmecloud.cn

Other certificates including the domain name cmecloud.cn

(limited to 100 certificates)
*.eos.xian-4.cmecloud.cn
*.eos.nanning-2.cmecloud.cn
*.eos.hangzhou-zs-1.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ningxia-1.cmecloud.cn
*.eos.huhehaote-11.cmecloud.cn
smp.ecso.hnzkh-1.cmecloud.cn
console.ecso.jsha-1.cmecloud.cn
*.eos.ecso.jscz-1.cmecloud.cn
*.cidc-rp-2159.xjaksxczwwwq1.joint.cmecloud.cn
*.eos.guiyang-5.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
console.ecs.hnzkh-1.cmecloud.cn
*.ahmashcso1.joint.cmecloud.cn
*.obs.cqdjmdyhlwq1.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.cmecloud.cn
console-beijing-1.cmecloud.cn
cidc-rp-13.joint.cmecloud.cn
*.eos.ecs.hnzkh-1.cmecloud.cn
*.eos.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.sdly-1.cmecloud.cn
*.eos.ecso.jxnc-1-internal.cmecloud.cn
*.eos.anhui-3.cmecloud.cn
*.ecis.zs-guian-1.cmecloud.cn
*.smp.ecs.jswx-1.cmecloud.cn
*.eos.ecs.jswx-1.cmecloud.cn
*.obs.cqyczwwwq1.joint.cmecloud.cn
*.eos-tianjin-1.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.eos-xinjiang-1.cmecloud.cn
*.eos.chongqing-4.cmecloud.cn
*.cidc-rp-2121.fjptmzzlzhcso1.joint.cmecloud.cn
*.obs.cidc-rp-2005.joint.cmecloud.cn
*.eos-guiyang-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.tjbhylyhcso2.joint.cmecloud.cn
*.jsycdthlwq1.joint.cmecloud.cn
*.xjbzzwwwq1.joint.cmecloud.cn
*.eos-huhehaote-6.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
*.obs.tjshnwqhcso2.joint.cmecloud.cn
*.obs.cidc-rp-11.joint.cmecloud.cn
smp.ecs.jswx-1.cmecloud.cn
*.ecis.zs-nanjing-1.cmecloud.cn
*.ecis.huabei-3.cmecloud.cn
*.eos-ningbo-3.cmecloud.cn
smp.ecs.hnzkh-1.cmecloud.cn
*.smp.ecso.jsnj2-1.cmecloud.cn
*.obs.jsycdthlwq1.joint.cmecloud.cn
*.eos.nanjing-zs-1.cmecloud.cn
*.eos.chongqing-4-internal.cmecloud.cn
*.ecis.zs-qingdao-1.cmecloud.cn
*.eos.ecs.hnld-1-internal.cmecloud.cn
*.eos-chengdu-6.cmecloud.cn
*.eos-guiyang-4.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.eos.ecs.hnzkz-1.cmecloud.cn
*.ecis.zs-shanghai-1.cmecloud.cn
console.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.jsxy-1.cmecloud.cn
*.eos.hainan-hw-1.cmecloud.cn
*.eos-guangxi-1.cmecloud.cn
*.lygrmxchcso1.joint.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.cidc-rp-2140.jsycdthlwq1.joint.cmecloud.cn
*.ecis.zs-beijing-1.cmecloud.cn
*.obs-website.cidc-rp-11.joint.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.eos.ecs.hbxy-1.cmecloud.cn
portal.zjdx.cmecloud.cn
*.obs.cqychlwq1.joint.cmecloud.cn
*.eos-huanan-1.cmecloud.cn
dingdong.cmecloud.cn
*.eos-hubei-1.cmecloud.cn
*.cidc-rp-2000.joint.cmecloud.cn
*.obs.cidc-rp-2000.joint.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.ecis.zs-guangzhou-1.cmecloud.cn
*.obs.zjjhhyyhcso1.joint.cmecloud.cn
*.obs.fjptmzzlzhcso1.joint.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ecs.xjklmy-1-internal.cmecloud.cn
*.secpool.ecs.hnld-1.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.jsntzwwwq.joint.cmecloud.cn
*.eos-yunnan-2.cmecloud.cn
*.obs.tjbhylyhcso2.joint.cmecloud.cn
*.eos.guiyang-zs-1.cmecloud.cn
*.obs.gdgznshcso1.joint.cmecloud.cn
*.obs.cqbshlwq1.joint.cmecloud.cn
*.eos-jilin-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.eos-anhui-1.cmecloud.cn
*.ecis.zs-hangzhou-1.cmecloud.cn
console.ecso.sxya-1.cmecloud.cn
*.cidc-rp-2139.cqcshlwq1.joint.cmecloud.cn

Certificate

The complete raw certificate details for *.eos-shanxi-1.cmecloud.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt++1t5ooffAvWlUsHITV
NSu2VuQzVOYSk2mEIICfSvKNU5GvJ23jK6vzwBSp5+wypAQaNP9+lN4h92im79f0
rFJmeQ/jsVx7p7U/AhtOBrt4sFF9WjdPfxZNwiVUbPxyH9q3TNgcWLPrlmIpFM1J
XbqbuTij/7Trv8Zhso4SEspHqly0MbBZ5Mr+uhqqKJZ4gIuDcteeUyp1oL5ccTGW
InuOR+4gOWVXiXbvGACGAJ5LQqHY0Hh5MYz/895/xGMcyFE0Tvetj5UHpqbw1Tcd
pIEP7d0XOgvYDzvIi6Fq/pe6t4luIc/ct3EbPmsEpOWwNdJVM3opQgdouuwm3HwI
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140981943387948203926109146155794551789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 08:21:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '江苏省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '苏州市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中移（苏州）软件技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eos-shanxi-1.cmecloud.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23219815132913662336104961383261557652293311361887272387819327522965652920076996003376120313972568483435576155598888855491143612924049112152074285203980134912946509346118849036088382911431271694522514225291262121651464594959502878556477388097920566130218119663244263938497156963062485287181176225543063062708413631737676730384831261190125745578225462351044884332606164825884728410627237085017953764828782364172370854990376164197758076446124478339534953442392839152268402785150118284552582832793445098312063356330260552345195837215668559334069775988027936367671200373185959693689296364314440049163399941061501668558931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-shanxi-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-shanxi-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-shanxi-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-shanxi-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1113cf61d0fb764df9ed35ba6312882fb410ba69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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