bf.sts.pl

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 0e:5a:b3:0e:c8:7e:50:2b:14:bd:da:f6:a0:04:5c:8f was issued on by Unizeto Technologies S.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bf.sts.pl,C=PL,1.2.840.113549.1.9.1=#0c0c61646d696e407374732e706c

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:5a:b3:0e:c8:7e:50:2b:14:bd:da:f6:a0:04:5c:8f
Serial Number (int): 19080130380819990757491329547385461903
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:ee:b4:5b:d0:2b:1d:58:5f:0c:5a:cd:ca:1e:d6:d0:7c:9a:2d:c4
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): d1:79:6b:e6:e9:82:4c:17:9c:75:12:28:fa:ad:40:9c:d7:7f:d9:d1
Fingerprint (sha256): bf:7c:75:f8:5c:b8:82:ef:a7:26:f1:5e:16:3a:a6:62:d9:1d:4e:74:61:3a:c5:dd:e2:41:93:c8:06:97:3c:bf

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate bf.sts.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf.sts.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bf.sts.pl

Other certificates including the domain name sts.pl

(limited to 100 certificates)
*.sts.pl
sts.pl
s5.sir.sportradar.com
retailstatus.sts.pl
*.sts.pl
statistics.sportradar.com
s5.sir.sportradar.com
sts.pl
*.sts.pl
statistics.sportradar.com
cudrqv.sts.pl
ssl437556.cloudflaressl.com
sts.pl
s5.sir.sportradar.com
status.sirocco.global
s5.sir.sportradar.com
ssl437555.cloudflaressl.com
s5.sir.sportradar.com
cudrqv.sts.pl
s5.sir.sportradar.com
sni.cloudflaressl.com
*.sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
ssl437554.cloudflaressl.com
partner.sts.pl
ssl437555.cloudflaressl.com
statistics.sportradar.com
status.meshcaid.com
sts.pl
sts.pl
sts.pl
statistics.sportradar.com
statistics.sportradar.com
status.sirocco.global
ssl437554.cloudflaressl.com
iacdn.sts.pl
s5.sir.sportradar.com
s5.sir.sportradar.com
ssl437555.cloudflaressl.com
status.sirocco.global
status.sirocco.global
ssl437554.cloudflaressl.com
incapsula.com
statistics.sportradar.com
status.meshcaid.com
sts.pl
statistics.sportradar.com
ssl437554.cloudflaressl.com
ssl437556.cloudflaressl.com
www.sts.pl
s5.sir.sportradar.com
sts.pl
s5.sir.sportradar.com
sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
status.sirocco.global
statistics.sportradar.com
ssl437554.cloudflaressl.com
statistics.sportradar.com
ssl437556.cloudflaressl.com
statistics.sportradar.com
ssl437555.cloudflaressl.com
ssl437554.cloudflaressl.com
statistics.sportradar.com
retailstatus.sts.pl
statistics.sportradar.com
statistics.sportradar.com
statistics.sportradar.com
s5.sir.sportradar.com
ssl437556.cloudflaressl.com
s5.sir.sportradar.com
sni.cloudflaressl.com
status.sirocco.global
ssl437555.cloudflaressl.com
status.sirocco.global
statistics.sportradar.com
status.sirocco.global
statistics.sportradar.com
ssl437556.cloudflaressl.com
status.meshcaid.com
s5.sir.sportradar.com
status.sirocco.global
ssl437556.cloudflaressl.com
sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
links.sts.pl
*.staging.sts.pl
*.staging-docker.sts.pl
status.meshcaid.com
links.sts.pl
statistics.sportradar.com
sts.pl
sts.pl
ssl437556.cloudflaressl.com

Certificate

The complete raw certificate details for bf.sts.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIQDlqzDsh+UCsUvdr2oARcjzANBgkqhkiG9w0BAQsFADCB
hTELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu
QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEpMCcG
A1UEAxMgQ2VydHVtIERvbWFpbiBWYWxpZGF0aW9uIENBIFNIQTIwHhcNMTkwNTMx
MDgyNDQxWhcNMjEwNTMwMDgyNDQxWjA+MQswCQYDVQQGEwJQTDESMBAGA1UEAwwJ
YmYuc3RzLnBsMRswGQYJKoZIhvcNAQkBFgxhZG1pbkBzdHMucGwwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoqPGkuOjMmmlgkGcfPW1gzN+2v9ZXxpoW
g771RsOuRQ1ZS4tNrLayubp0XW0oD4TLAstzuaKPmKQGle9VyUp5ab07l8odm6DN
cPGz8wa/zhEnBygwnSgc28v28KK0Q4+TgT7iNE3IZqLfCbxzftgpPY0tHKMwSCc7
v5zUTw6IXRYxNcSR64yj+JC2+ziOsmZvnKpJEOBKYnQstTnLOY6D1FfG7mjczmLe
eH5zLT5cj/eJHZqo0mIcFidBkDlMR3qQZSWLkEWlGqM0NL+dhC6/klTE+dTr4ohx
MsXuNBlng2gG05Nz+nxyA5GyHHG3l3Uug/qgtJhcts1a9+aCcU7RAgMBAAGjggG/
MIIBuzAMBgNVHRMBAf8EAjAAMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwu
Y2VydHVtLnBsL2R2Y2FzaGEyLmNybDBxBggrBgEFBQcBAQRlMGMwKwYIKwYBBQUH
MAGGH2h0dHA6Ly9kdmNhc2hhMi5vY3NwLWNlcnR1bS5jb20wNAYIKwYBBQUHMAKG
KGh0dHA6Ly9yZXBvc2l0b3J5LmNlcnR1bS5wbC9kdmNhc2hhMi5jZXIwHwYDVR0j
BBgwFoAU5TGtvzoRlvSDvFA81LeQm5Du3iUwHQYDVR0OBBYEFHjutFvQKx1YXwxa
zcoe1tB8mi3EMB0GA1UdEgQWMBSBEmR2Y2FzaGEyQGNlcnR1bS5wbDBLBgNVHSAE
RDBCMAgGBmeBDAECATA2BgsqhGgBhvZ3AgUBAzAnMCUGCCsGAQUFBwIBFhlodHRw
czovL3d3dy5jZXJ0dW0ucGwvQ1BTMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAOBgNVHQ8BAf8EBAMCBaAwFAYDVR0RBA0wC4IJYmYuc3RzLnBsMBMGCisG
AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1qYPSy9DO1hzxIDsM
B1foP7S13AM0YlVC68eHPrKokkuyATRIIOKm51TCSn4V5qsim5ccdqE9yVYeBSNI
EZs4U2m9TrqAIxD18Mb6vNwuNYLh/ADc2RUuVjNLr81A2R95bT0xdfIS6rgnKEDI
lqEIMKr5iRD3d7dtEB/4OdgRActWxpiXJohCmubwvcISEBXg6e171uHSQ/4mIIO3
+6lEvVxOg03mL6PnuOTBsjD/Vp7wGgzSfJ9TM19/QrhTpQq8sTntw/NP/53VCrd1
5DyVNDVEkos0a/JfDg2nlerrZTcehSghIfAsoAh1b0Jc6cOsC3zMyYToxvqdeleH
i5A/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KjxpLjozJppYJBnHz1t
YMzftr/WV8aaFoO+9UbDrkUNWUuLTay2srm6dF1tKA+EywLLc7mij5ikBpXvVclK
eWm9O5fKHZugzXDxs/MGv84RJwcoMJ0oHNvL9vCitEOPk4E+4jRNyGai3wm8c37Y
KT2NLRyjMEgnO7+c1E8OiF0WMTXEkeuMo/iQtvs4jrJmb5yqSRDgSmJ0LLU5yzmO
g9RXxu5o3M5i3nh+cy0+XI/3iR2aqNJiHBYnQZA5TEd6kGUli5BFpRqjNDS/nYQu
v5JUxPnU6+KIcTLF7jQZZ4NoBtOTc/p8cgORshxxt5d1LoP6oLSYXLbNWvfmgnFO
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19080130380819990757491329547385461903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 08:24:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-30 08:24:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bf.sts.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29370596103918076181532807221885055346490864310246374867885149986098236010784428681146187485020992427070157492579250629888795573898496914369710365778324547781527177839674724207664512312356210852422251724546361262414971155447473544385212815511720376202551124873601979481627850348480457768671125984424322651232352218055713483944169812229043974718612869015673173140968207987678446298300916783625071349258347428794995314354714702441880948544397821323386045797504206864590320355255720332620697129291445256882974356552552273725312965313483540471208912326479751691001068460748268591143758778730108428866118806691351962406609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78eeb45bd02b1d585f0c5acdca1ed6d07c9a2dc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf.sts.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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