www.buendnisse-fuer-bildung.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0e:b0:ef:08:b1:7e:ba:e8:73:37:84:11 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.buendnisse-fuer-bildung.de,OU=Domain Control Validated,C=DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b0:ef:08:b1:7e:ba:e8:73:37:84:11
Serial Number (int): 4546689887704229631084692497
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 85:b8:42:71:77:4a:d2:97:44:e8:bd:77:2b:2d:bb:b3:23:54:86:ad
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 7e:cb:0c:60:9b:9c:36:81:be:78:85:cb:16:46:17:57:bc:ad:99:2e
Fingerprint (sha256): be:e2:d1:30:a7:8b:87:3e:0d:1a:e5:26:1d:2a:97:17:17:6d:fb:73:43:d1:98:f5:5c:63:e2:9f:25:f6:fb:11

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.buendnisse-fuer-bildung.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buendnisse-fuer-bildung.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buendnisse-fuer-bildung.de
buendnisse-fuer-bildung.de

Other certificates including the domain name buendnisse-fuer-bildung.de

(limited to 100 certificates)
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
www.alphadekade.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de

Certificate

The complete raw certificate details for www.buendnisse-fuer-bildung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgIMDrDvCLF+uuhzN4QRMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE4MDExMTA4MzAxNFoXDTE5MDEx
MjA4MzAxNFowWTELMAkGA1UEBhMCREUxITAfBgNVBAsTGERvbWFpbiBDb250cm9s
IFZhbGlkYXRlZDEnMCUGA1UEAxMed3d3LmJ1ZW5kbmlzc2UtZnVlci1iaWxkdW5n
LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OV5zVmGhvJb+8zT
Q/Oylvph9DydOydKqotAnKlsBP1L8POBXfitOQrR+/J0+h3LEBxfvjyiDftf31Vw
912KaF4J8WCmjLCcQxGlWT2MkchtcnMHFCSDZOA+ruo2CRVpGaaKCeLReP6Uv8A0
1zWvzZ/3neivKtTvZ208aGf/5YkSCYdJ/90c05DC1WQbuoJGrGQKMZ7ADarC/y9T
AoQIOPUydP443OXZo4u0QCPlWtJKW7P/oBcXwTg47gwXg93E5/1ZliRJW8phVoxT
V1tTvNBj5hXUMP4HfPrcZ/Z1K8+y1ygnB2VPT48JOwP0P4q1QihbP4Vd8vEqO7V4
+u2PDQIDAQABo4ID4TCCA90wDgYDVR0PAQH/BAQDAgWgMIGJBggrBgEFBQcBAQR9
MHswQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUyLmFscGhhc3NsLmNvbS9jYWNl
cnQvZ3NhbHBoYXNoYTJnMnIxLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3Ay
Lmdsb2JhbHNpZ24uY29tL2dzYWxwaGFzaGEyZzIwVwYDVR0gBFAwTjBCBgorBgEE
AaAyAQoKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29t
L3JlcG9zaXRvcnkvMAgGBmeBDAECATAJBgNVHRMEAjAAMD4GA1UdHwQ3MDUwM6Ax
oC+GLWh0dHA6Ly9jcmwyLmFscGhhc3NsLmNvbS9ncy9nc2FscGhhc2hhMmcyLmNy
bDBFBgNVHREEPjA8gh53d3cuYnVlbmRuaXNzZS1mdWVyLWJpbGR1bmcuZGWCGmJ1
ZW5kbmlzc2UtZnVlci1iaWxkdW5nLmRlMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAdBgNVHQ4EFgQUhbhCcXdK0pdE6L13Ky27syNUhq0wHwYDVR0jBBgw
FoAU9c3VPAhQ+WpPOreX2laD5mnSaPcwggHzBgorBgEEAdZ5AgQCBIIB4wSCAd8B
3QB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABYORXVBwAAAQD
AEYwRAIgDiqRtKsqQv9ce6OM20n/VwnPI4vxxq/neqpU25Fw+44CID6Yq7gSXbXm
20xrfJ+srF0zHvr3rGLvpr6nBd0CCxMUAHYAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZ
EVzA75SYVdaJ0N0AAAFg5FdUUwAABAMARzBFAiEAm0PySpUrNZuGaJ4sMqzWwWzp
nS5h9Gp+MC9mbo52yJwCIHSIn9HZle08GaDZz9hQacedSs4iZ3xeEtCUnHti7T+l
AHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFg5FdW6wAABAMA
RjBEAiB9+aI4E3Z05/QKUMBIxNAhprZjbXjw1rOMtkvoDfp0dwIgXFmcbLmiy6MG
xoeHsqHYgq5B0dCjWq0xduLEiQz0knAAdQC72d+8H4pxtZOUI5eqkntHOFeVCqtS
6BqQlmQ2jh7RhQAAAWDkV1exAAAEAwBGMEQCIC5LZt59aiWeO5UDt3AtXlLg58SX
O69xojZmCT6hAG1bAiB/BMUhxu6EGjtVodzcxK3jbFSfxjFj88S7LvScxGzn8zAN
BgkqhkiG9w0BAQsFAAOCAQEAbsOKICNOz4EuTG8uH4g5i6B1d1BMk+JroRZzBOpZ
qUoIqCJir3sdqMuwcj2Miy+44cHl6ggK4SoCKV/GkPCw5y3564wKMyHwnm9do5SV
xXVKRZRTdDz5ErJEHqNLE5ieAQAlS9b0dFMD+cc4h5UJOB7Fi0HDd2ftphExr6B/
eSadQY6dZqcYUA+T3KCnkHOndg8VGbeaahRP3sZSkogkEDNvfFRFtA5wGClvCWKE
7krADt9a1G/mgtPGqsmDslB5boRZGMaVcCkQ0xQLvW74pU6xn51Zxjenw9FsugOS
q+hPZKPRaFzkJgEtF08OX64dhWESOCC06aO+KMiTT0GAEg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OV5zVmGhvJb+8zTQ/Oy
lvph9DydOydKqotAnKlsBP1L8POBXfitOQrR+/J0+h3LEBxfvjyiDftf31Vw912K
aF4J8WCmjLCcQxGlWT2MkchtcnMHFCSDZOA+ruo2CRVpGaaKCeLReP6Uv8A01zWv
zZ/3neivKtTvZ208aGf/5YkSCYdJ/90c05DC1WQbuoJGrGQKMZ7ADarC/y9TAoQI
OPUydP443OXZo4u0QCPlWtJKW7P/oBcXwTg47gwXg93E5/1ZliRJW8phVoxTV1tT
vNBj5hXUMP4HfPrcZ/Z1K8+y1ygnB2VPT48JOwP0P4q1QihbP4Vd8vEqO7V4+u2P
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4546689887704229631084692497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-11 08:30:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 08:30:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.buendnisse-fuer-bildung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29400445481479645216131940364018411968575242236292518357321051118188079671669180456590812324346555347529807385400861456898386104035487904243201957669354340109550625084674541713428978148592506286531440330835565600000092836550292098164160029367944109832743254866702833692877578840600890110017909506069175978502433144382589336414489700280664393132297515626960153851856539219094946276024877181970760195306580351776753349598214552422869199676531857690585414937312178342718677792186102989229905624810042450843887960750132326145373691802864925802198882993441634106227356872272931938443364090816777071119563283045292161470221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85b84271774ad29744e8bd772b2dbbb3235486ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							01dd007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000160e457541c000004030046304402200e2a91b4ab2a42ff5c7ba38cdb49ff5709cf238bf1c6afe77aaa54db9170fb8e02203e98abb8125db5e6db4c6b7c9facac5d331efaf7ac62efa6bea705dd020b13140076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000160e457545300000403004730450221009b43f24a952b359b86689e2c32acd6c16ce99d2e61f46a7e302f666e8e76c89c022074889fd1d995ed3c19a0d9cfd85069c79d4ace22677c5e12d0949c7b62ed3fa5007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000160e45756eb000004030046304402207df9a238137674e7f40a50c048c4d021a6b6636d78f0d6b38cb64be80dfa747702205c599c6cb9a2cba306c68787b2a1d882ae41d1d0a35aad3176e2c4890cf49270007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000160e45757b1000004030046304402202e4b66de7d6a259e3b9503b7702d5e52e0e7c4973baf71a23666093ea1006d5b02207f04c521c6ee841a3b55a1dcdcc4ade36c549fc63163f3c4bb2ef49cc46ce7f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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