*.atlanticpkg.com

- Atlantic Corporation of Wilmington, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 19:61:ee:2a:8b:c2:59:65:35:31:bd:12 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atlantic Corporation of Wilmington, Inc.

Organization: Atlantic Corporation of Wilmington, Inc.
State / Province: North Carolina
Locality: Wilmington
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 19:61:ee:2a:8b:c2:59:65:35:31:bd:12
Serial Number (int): 7855515758093129827400924434
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 14:ac:41:ff:46:05:9c:72:ed:15:f2:c9:03:9c:cc:95:c6:1a:79:c2
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): df:6a:6d:e0:3c:7c:9c:d4:aa:07:4b:fb:28:5a:77:45:90:65:ef:a5
Fingerprint (sha256): c1:cd:e9:a9:d9:f6:1b:3e:ad:ed:f0:6e:bb:d2:10:0c:6e:a8:ee:ea:0d:a0:ea:56:60:eb:93:49:bb:8c:6a:10

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.atlanticpkg.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.atlanticpkg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.atlanticpkg.com
atlanticpkg.com

Other certificates including the domain name atlanticpkg.com

(limited to 100 certificates)
www.atlanticpkg.com
packagepro.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
packagepro.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
packagepro.atlanticpkg.com
stretch.atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
atlanticpkg.com
*.atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
atlanticpkg.com
atlanticpkg.com
packagepro.atlanticpkg.com
atlanticpkg.com
www.atlanticpkg.com
www.atlanticpkg.com

Certificate

The complete raw certificate details for *.atlanticpkg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvTCCBaWgAwIBAgIMGWHuKovCWWU1Mb0SMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTExMDExODQxMDdaFw0y
MTEyMTUxOTU2MDRaMIGKMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fy
b2xpbmExEzARBgNVBAcTCldpbG1pbmd0b24xMTAvBgNVBAoTKEF0bGFudGljIENv
cnBvcmF0aW9uIG9mIFdpbG1pbmd0b24sIEluYy4xGjAYBgNVBAMMESouYXRsYW50
aWNwa2cuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTOVq9EG
AyXJskMtukVe6xMnFSZIo5FWoRiHQIZxDpTMGqfrWZqv2F/+clAAOjLvdmufbvMP
j5BCgTLDxS5/J9KrRnzWdvx6iLClzDLZl2ve5YukV9TYKP/mYzQCTHCav93n95mq
q4veCkG+H94reC4KiV9igOu/4ztXTHw/F1y//NXo4mItzHKgoalSghojcrGvuC+4
0ROQFwoFb0mVuALm6a2AY6N9BPd0uIrXLsf0pXVeh4jxdpwL7s9Z7keZrGv/+OHU
aODf/oA5oZdbrfAwaZn2quPETyTe0NG4v6hHOz0R+xEDyfom0PJwP6oyQd6UhFKg
bZ6AZNXk3Kl/hwIDAQABo4IDWjCCA1YwDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEF
BQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24u
Y29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0
cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAE
TzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9i
YWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/BgNV
HR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zz
c2xjYTIwMTguY3JsMC0GA1UdEQQmMCSCESouYXRsYW50aWNwa2cuY29tgg9hdGxh
bnRpY3BrZy5jb20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1Ud
IwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBQUrEH/RgWccu0V
8skDnMyVxhp5wjCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcAXNxDkv7mq0VE
sV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAFuKEVvhAAABAMASDBGAiEA7JoiJaYb
fgeNbZzp/nbnSf04dSBGOluzgInAv6hwFCQCIQDH7JbzbsBEsd702f0lUKSVx8B0
ql/N9lq4PFG2tGHiJgB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ
AAABbihFbQQAAAQDAEcwRQIgAhvWOv8/ByhafC0AFK7kAD1q7KTNE7Bqcbw02iwR
h8ICIQCIf15YsLQoOmNq6kydecnn9dTq44V5DftvCg0o7yXs+gB2APZclC/RdzAi
FFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABbihFbQMAAAQDAEcwRQIhAJgu3uTi
W3Z46Av9hDAXKW/Jmri1WkECA+EAS4M36wvKAiAC3YTFQYOYee8WUAk3H7FDEUsi
f8QJNGVlLS2dNfqqwDANBgkqhkiG9w0BAQsFAAOCAQEATZYsfTYi+swPdfxvY/8A
5oWZqKtaMndkiZEOmbILmOPq20bJG06H231naTwsZTgGTEbb/wPyA68rk8jCHMfi
ez8+RdaO3t7cVlpa2xIMKVAWMLv/2XV52aIAiAJ5LfERE3brxt2ORPUnVohJl8Ow
eYj0iBomgSHcAcdd6KhvGAz8zNpIH/FwCyjhN3TnZ83CWQFsSZf/f4FPsvW8t8wa
XuHOdCwdKgPcNMq6pYC53s9RQldIx2fNq6VnYSF20Plu5E4Pl1pXk5NtyivVIETa
6AmxGKNVRrczre4M5FV3kj4OX8jzYDYbpHRgTe2kuadu/PED+8DrhI7BoE4dHNBo
Cw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTOVq9EGAyXJskMtukVe
6xMnFSZIo5FWoRiHQIZxDpTMGqfrWZqv2F/+clAAOjLvdmufbvMPj5BCgTLDxS5/
J9KrRnzWdvx6iLClzDLZl2ve5YukV9TYKP/mYzQCTHCav93n95mqq4veCkG+H94r
eC4KiV9igOu/4ztXTHw/F1y//NXo4mItzHKgoalSghojcrGvuC+40ROQFwoFb0mV
uALm6a2AY6N9BPd0uIrXLsf0pXVeh4jxdpwL7s9Z7keZrGv/+OHUaODf/oA5oZdb
rfAwaZn2quPETyTe0NG4v6hHOz0R+xEDyfom0PJwP6oyQd6UhFKgbZ6AZNXk3Kl/
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7855515758093129827400924434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 18:41:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 19:56:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlantic Corporation of Wilmington, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.atlanticpkg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23379523759158920981407116409217138110137863409573245463411101977875638495934868140616711091220240814354436554609151745768082684252121546194093068944106908296123165993530276847001824733979689926315589104466421427174391819449367814782136732655276470289288381164624718161995989086585400113892050680781760636553079217308327543713101954322037761533831092043277647593415171397111331497905942905284673129696165165425216355959828369299127899448952180448458891581398232954411890673205656190080334729217423822233329514578869757037011067170550184141750208465145079977283601830581592093160729543284092636283276055357742981414791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlanticpkg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticpkg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14ac41ff46059c72ed15f2c9039ccc95c61a79c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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