dialogue.kpmg.se
- KPMG AB -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 4f:9b:25:f0:82:f9:5e:0e:50:be:85:26 was issued on by GlobalSign nv-sa.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
KPMG AB
Organization:
KPMG AB
State / Province:
Stockholm
Locality: Stockholm
Country: SE
Locality: Stockholm
Country: SE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 4f:9b:25:f0:82:f9:5e:0e:50:be:85:26Serial Number (int): 24636878442142649728211256614
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: eb:71:ef:74:0a:74:53:a1:62:b5:c3:b9:b9:a1:56:83:8d:f5:9c:ad
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): 01:ef:01:f8:53:48:07:4c:e9:a2:f5:7a:93:b0:26:61:79:9c:4e:ad
Fingerprint (sha256): bb:f9:63:0f:3c:b8:69:3b:12:7f:70:2b:a3:cf:c1:61:bd:76:90:97:97:99:67:7d:8a:18:66:11:f6:e9:fb:6a
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate dialogue.kpmg.se
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dialogue.kpmg.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dialogue.kpmg.se
Other certificates including the domain name kpmg.se
(limited to 100 certificates)
*.kpmg.se
ka.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
mi.kpmg.se
sentry.kpmg.se
sft.kpmg.se
ef.kpmg.se
sipfed.kpmg.com
Sip.kpmg.com
sip-ema.kpmg.com
ka.kpmg.se
sipfed.kpmg.com
*.kpmg.se
*.kpmg.se
indecon.kpmg.se
cdpapp1.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
sft.kpmg.se
*.kpmg.se
info.kpmg.se
sipfed-ema2.kpmg.com
apimgmt.kpmg.se
access.lync.omvideo.se
video.kpmg.se
ef.kpmg.se
ka2.kpmg.se
sipfed-ema2.kpmg.com
*.kpmg.se
sipfed-ema2.kpmg.com
access.lync.omvideo.se
*.kpmg.se
sentry.kpmg.se
sip-amr.kpmg.com
access.lync.omvideo.se
*.kpmg.se
gp.kpmg.se
*.kpmg.se
mi.kpmg.se
*.kpmg.se
sft.kpmg.se
access.lync.omvideo.se
dialogue.kpmg.se
sip-ema2.kpmg.com
*.kpmg.se
info.kpmg.se
Sip.kpmg.com
access.lync.omvideo.se
sip-ema3.kpmg.com
xmpp.vm.omvideo.se
sipfed.kpmg.com
access.lync.omvideo.se
info.kpmg.se
info.kpmg.se
sft.kpmg.se
ka.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
mi.kpmg.se
sentry.kpmg.se
sft.kpmg.se
ef.kpmg.se
sipfed.kpmg.com
Sip.kpmg.com
sip-ema.kpmg.com
ka.kpmg.se
sipfed.kpmg.com
*.kpmg.se
*.kpmg.se
indecon.kpmg.se
cdpapp1.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
sft.kpmg.se
*.kpmg.se
info.kpmg.se
sipfed-ema2.kpmg.com
apimgmt.kpmg.se
access.lync.omvideo.se
video.kpmg.se
ef.kpmg.se
ka2.kpmg.se
sipfed-ema2.kpmg.com
*.kpmg.se
sipfed-ema2.kpmg.com
access.lync.omvideo.se
*.kpmg.se
sentry.kpmg.se
sip-amr.kpmg.com
access.lync.omvideo.se
*.kpmg.se
gp.kpmg.se
*.kpmg.se
mi.kpmg.se
*.kpmg.se
sft.kpmg.se
access.lync.omvideo.se
dialogue.kpmg.se
sip-ema2.kpmg.com
*.kpmg.se
info.kpmg.se
Sip.kpmg.com
access.lync.omvideo.se
sip-ema3.kpmg.com
xmpp.vm.omvideo.se
sipfed.kpmg.com
access.lync.omvideo.se
info.kpmg.se
info.kpmg.se
sft.kpmg.se
Certificate
The complete raw certificate details for dialogue.kpmg.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIMT5sl8IL5Xg5QvoUmMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzEyMDgxMTExMDNaFw0y NTAxMDgxMTExMDJaMGIxCzAJBgNVBAYTAlNFMRIwEAYDVQQIEwlTdG9ja2hvbG0x EjAQBgNVBAcTCVN0b2NraG9sbTEQMA4GA1UEChMHS1BNRyBBQjEZMBcGA1UEAxMQ ZGlhbG9ndWUua3BtZy5zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKDDXm427S94b67TMzdhreH+FQk9dJKekhMUpq3YpY6J2+43hfOKmquqOzyKt2QD Bjw9v+ldS0VaUCbXpjKUUV/yDLEqGYHxcnaAzsRhPZtb7U37Z1L28mCFEhZ6khp4 1xS9mZkcqfXbQG3VK2QKqhmbSr+nxcU0jksdYwb7izaA8PB9nDdNUPHudkweLN6g DQff/yoAGkMdRyRszSNDuxGlnGrGFT75WlrARNYocrKiEK6a8trhZjJkvAw1NoUU FxWFF4kHS9b+WDUvR4cb0AIXufpf5xCcSkzgaEy+SgmXN2Tnmsx5ySbLtvQ/UoBL +HJnDvitqN4G/wP3dZjqcGMCAwEAAaOCAd0wggHZMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRw Oi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4 LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Ny c2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUF BwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZn gQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9iYWxzaWduLmNv bS9nc3JzYW92c3NsY2EyMDE4LmNybDAbBgNVHREEFDASghBkaWFsb2d1ZS5rcG1n LnNlMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT4 73/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQU63HvdAp0U6FitcO5uaFWg431 nK0wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAH7XNHKl A2c8W6wNHdS4IpaKqLr1mV3yH1ZN2TQkYgGOEKg7wwcha5px4PSsq5R+vcsEv8Nw pMCvOCrcKQx1KwlDadz1H9O0nxSzbwHtaq/gbl0UcIf1Ts0hWynojXVPkJ0oX0Nk NUfxKHQVCUYB5+5GJoh6max45oVXux1Ws1UV4E0snzu0F6ZZI+PwpxHK0/0t8aJU QISf39Vc3dnBakObl+9cNRgXetnEJb4WBnPJIB5o2mwAQcNLFVK/jO0LVPhlkVht 8ju3J8yoBvmAzKraUDvIUlD1t+uZtR89ropKN7Kjdpy9l7tnlfoeTNe82QtamGQR c2kQfnwzDh3o+Qw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMNebjbtL3hvrtMzN2Gt 4f4VCT10kp6SExSmrdiljonb7jeF84qaq6o7PIq3ZAMGPD2/6V1LRVpQJtemMpRR X/IMsSoZgfFydoDOxGE9m1vtTftnUvbyYIUSFnqSGnjXFL2ZmRyp9dtAbdUrZAqq GZtKv6fFxTSOSx1jBvuLNoDw8H2cN01Q8e52TB4s3qANB9//KgAaQx1HJGzNI0O7 EaWcasYVPvlaWsBE1ihysqIQrpry2uFmMmS8DDU2hRQXFYUXiQdL1v5YNS9HhxvQ Ahe5+l/nEJxKTOBoTL5KCZc3ZOeazHnJJsu29D9SgEv4cmcO+K2o3gb/A/d1mOpw YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24636878442142649728211256614 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 11:11:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 11:11:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG AB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dialogue.kpmg.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20294468774632184045802705601133679342924515063981825076118209453343685201751706572711558282422303323250917401295692421584237893854568958041109932557870633991937231997726805750514537106358734479239863630225278850195594659931088942712733141325305955521872726652025247028723717018903950588697924290865998784137119834820833308872031119744912202153725476227890946251328303628278393611899547061159682573427917976284639827194950497677945517752712354396144123635609613021877665587363542113656902112305306807183375258025051217822198177047147740734551641787323937788672615471857607905866973454970737473641143317358774701420643 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogue.kpmg.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eb71ef740a7453a162b5c3b9b9a156838df59cad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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