networksecurityscan.bullguard.com
Issued by GlobalSign Domain Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 19:5d:cd:61:44:13:c4:37:e9:f0:d6:a6 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=networksecurityscan.bullguard.com,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 19:5d:cd:61:44:13:c4:37:e9:f0:d6:a6Serial Number (int): 7850525226126430822026237606
Serial Number lenght: 93 bits, 12 octets
SubjectKeyId: 33:2a:aa:25:61:90:92:fc:a6:88:d5:b7:b8:d7:51:3b:42:6f:c6:8d
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f
Fingerprint (sha1): 55:b4:af:cd:c3:ec:15:8c:79:d0:59:68:3f:26:52:49:a1:72:95:ac
Fingerprint (sha256): c3:f1:3f:34:0f:30:2a:45:bb:79:d2:aa:31:57:f4:ca:29:5c:52:20:52:59:b6:bf:0b:c5:b9:f2:39:f6:ba:fb
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl
Check the revocation status for certificate networksecurityscan.bullguard.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for networksecurityscan.bullguard.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
networksecurityscan.bullguard.com
Other certificates including the domain name bullguard.com
(limited to 100 certificates)
mobile-security.bullguard.com
flare10.bullguard.com
update.bullguard.com
networksecurityscan.bullguard.com
sso-csid.bullguard.com
dojo.bullguard.com
*.bullguard.com
mail.bullguard.com
support.bullguard.com
mis.bullguard.com
mail.bullguard.com
beta.bullguard.com
shop.bullguard.com
backup1.bullguard.com
mis-auth.bullguard.com
www.bullguard.com
order.norton.com
order.norton.com
beta.bullguard.com
volzye.bullguard.com
networksecurityscan.bullguard.com
nortonlifelock.com
sni.cloudflaressl.com
*.bullguard.com
shop.bullguard.com
order.norton.com
identity.bullguard.com
*.dev.bullguard.com
*.bullguard.com
dojo.bullguard.com
identity.bullguard.com
flare10.bullguard.com
mail.bullguard.com
mis.bullguard.com
testshop.bullguard.com
mail.bullguard.com
dojo.bullguard.com
networksecurityscan.bullguard.com
www.bullguard.com
volzye.bullguard.com
www.bullguard.com
inspector.bullguard.com
www.bullguard.com
support.bullguard.com
networksecurityscan.bullguard.com
mobile-security.bullguard.com
shop.bullguard.com
sni.cloudflaressl.com
*.dev.bullguard.com
networksecurityscan.bullguard.com
nortonlifelock.com
www.bullguard.com
inspector.bullguard.com
order.norton.com
backup1.bullguard.com
nortonlifelock.com
mis.bullguard.com
*.bullguard.com
*.bullguard.com
www.bullguard.com
nortonlifelock.com
*.test.bullguard.com
mis.bullguard.com
inspector.bullguard.com
networksecurityscan.bullguard.com
testshop.bullguard.com
www.bullguard.com
*.test.bullguard.com
mis.bullguard.com
www.bullguard.com
volzye.bullguard.com
shop.bullguard.com
dojo.bullguard.com
www.bullguard.com
nortonlifelock.com
www.bullguard.com
flare10.bullguard.com
*.bullguard.com
*.bullguard.com
order.norton.com
shop.bullguard.com
nortonlifelock.com
www.bullguard.com
mobile-security.bullguard.com
*.bullguard.com
flare10.bullguard.com
update.bullguard.com
networksecurityscan.bullguard.com
sso-csid.bullguard.com
dojo.bullguard.com
*.bullguard.com
mail.bullguard.com
support.bullguard.com
mis.bullguard.com
mail.bullguard.com
beta.bullguard.com
shop.bullguard.com
backup1.bullguard.com
mis-auth.bullguard.com
www.bullguard.com
order.norton.com
order.norton.com
beta.bullguard.com
volzye.bullguard.com
networksecurityscan.bullguard.com
nortonlifelock.com
sni.cloudflaressl.com
*.bullguard.com
shop.bullguard.com
order.norton.com
identity.bullguard.com
*.dev.bullguard.com
*.bullguard.com
dojo.bullguard.com
identity.bullguard.com
flare10.bullguard.com
mail.bullguard.com
mis.bullguard.com
testshop.bullguard.com
mail.bullguard.com
dojo.bullguard.com
networksecurityscan.bullguard.com
www.bullguard.com
volzye.bullguard.com
www.bullguard.com
inspector.bullguard.com
www.bullguard.com
support.bullguard.com
networksecurityscan.bullguard.com
mobile-security.bullguard.com
shop.bullguard.com
sni.cloudflaressl.com
*.dev.bullguard.com
networksecurityscan.bullguard.com
nortonlifelock.com
www.bullguard.com
inspector.bullguard.com
order.norton.com
backup1.bullguard.com
nortonlifelock.com
mis.bullguard.com
*.bullguard.com
*.bullguard.com
www.bullguard.com
nortonlifelock.com
*.test.bullguard.com
mis.bullguard.com
inspector.bullguard.com
networksecurityscan.bullguard.com
testshop.bullguard.com
www.bullguard.com
*.test.bullguard.com
mis.bullguard.com
www.bullguard.com
volzye.bullguard.com
shop.bullguard.com
dojo.bullguard.com
www.bullguard.com
nortonlifelock.com
www.bullguard.com
flare10.bullguard.com
*.bullguard.com
*.bullguard.com
order.norton.com
shop.bullguard.com
nortonlifelock.com
www.bullguard.com
mobile-security.bullguard.com
*.bullguard.com
Certificate
The complete raw certificate details for networksecurityscan.bullguard.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIMGV3NYUQTxDfp8NamMA0GCSqGSIb3DQEBCwUAMGAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN MTgxMTI4MTQ0MDM4WhcNMjAxMjE0MTQyNzA5WjBPMSEwHwYDVQQLExhEb21haW4g Q29udHJvbCBWYWxpZGF0ZWQxKjAoBgNVBAMTIW5ldHdvcmtzZWN1cml0eXNjYW4u YnVsbGd1YXJkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCF XZR8bPjNTcZnjIh8l57ua2uxoRk1hKOLQzF5osx63daxg1eD3u1FSxbNTTz6x9MF dCjT3CggR5mqmryz4zLli1D5a3uBCibX2T2nQWn/MO1gcq0IFhJ994769DuCxF2c zSqP345SBGQGSA+luvDlQzC/AsMOKN+MJ1Itzm9sI253St33vcerW0QXmpkWWUGW hul7WNKaZj1p2hDphZtC+937r21VVT2FnPjsFUwVjqUdFsMX3aCJK1LAxoP8nomi 4hzG2DuKl2zOy3A8WnSwlafPu0xRSFmmDOxdEePI9GtAsZiHRFlKwxcBK0M/KHDn cJxTlDWlNhiC4DcFIXkCAwEAAaOCA2IwggNeMA4GA1UdDwEB/wQEAwIFoDCBlAYI KwYBBQUHAQEEgYcwgYQwRwYIKwYBBQUHMAKGO2h0dHA6Ly9zZWN1cmUuZ2xvYmFs c2lnbi5jb20vY2FjZXJ0L2dzZG9tYWludmFsc2hhMmcycjEuY3J0MDkGCCsGAQUF BzABhi1odHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nkb21haW52YWxzaGEy ZzIwVgYDVR0gBE8wTTBBBgkrBgEEAaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6 Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1Ud EwQCMAAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5nbG9iYWxzaWduLmNv bS9ncy9nc2RvbWFpbnZhbHNoYTJnMi5jcmwwLAYDVR0RBCUwI4IhbmV0d29ya3Nl Y3VyaXR5c2Nhbi5idWxsZ3VhcmQuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAdBgNVHQ4EFgQUMyqqJWGQkvymiNW3uNdRO0Jvxo0wHwYDVR0jBBgw FoAU6k581IAt5RWBhiaMgm3AmKTPlw8wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB aAB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZ1rDz0UAAAQD AEcwRQIgX5qSLgjK5S3+c8p3McjA29ogkadmRYFGSYrGNclkZ/ACIQDVow/tlU7x nf8b5IoXFjAZjB73tyeQMpzD2tR2Aq7iAgB2AO5Lvbd1zmC64UJpH6vhnmajD35f sHLYgwDEe4l6qP3LAAABZ1rDz48AAAQDAEcwRQIgNnDW5e8qWamQYzVkZ2L47YHv xPtKFMJCS1/9wuik+ysCIQC4KDuYbzngYj8UsKIcYSdhXa0HiFFnpT1t1qG8roUq TAB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABZ1rDz4kAAAQD AEcwRQIgRLF6LjcLKr3x1/8btRHUJLING0y3wPkp8bfKihW5ATUCIQCij8+cP8LP RkRin+hIZiM63tDtcw77PHape+OTwssPZDANBgkqhkiG9w0BAQsFAAOCAQEAZdil fVHN258Mpot3DA0sL6V5ZP+aUCPUlr4PL3kfwoqSfxe4mH1+iYOQ6qxLQpTK5KH7 3VaEd4/Dwt7aV/pgwInbfR/PDyZYIUCy7OKdAZerbeLcLwb4NZ1St+6g4AzTuBEF 6tzWtysmeAOchLNe6Z22sPvnprbAP2/naONRsrsu1+aVJkZcxEI817sYSZUcwRUB cy8McBWZN+NqSeMrdvnFy85IecGycVih6GQ/gg5HXfzQAhMUbI4U1WApEmxSPWTE zhX+Ab8IlTMWjHtOS/Z2flfCxxAtHWb8xbSrLrSOtDixKyJKZ9eJyIfpvRtc+PiE 5OFVJBFdBqKukihtjQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIVdlHxs+M1NxmeMiHyX nu5ra7GhGTWEo4tDMXmizHrd1rGDV4Pe7UVLFs1NPPrH0wV0KNPcKCBHmaqavLPj MuWLUPlre4EKJtfZPadBaf8w7WByrQgWEn33jvr0O4LEXZzNKo/fjlIEZAZID6W6 8OVDML8Cww4o34wnUi3Ob2wjbndK3fe9x6tbRBeamRZZQZaG6XtY0ppmPWnaEOmF m0L73fuvbVVVPYWc+OwVTBWOpR0WwxfdoIkrUsDGg/yeiaLiHMbYO4qXbM7LcDxa dLCVp8+7TFFIWaYM7F0R48j0a0CxmIdEWUrDFwErQz8ocOdwnFOUNaU2GILgNwUh eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7850525226126430822026237606 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 14:40:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-14 14:27:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'networksecurityscan.bullguard.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24303519555787949498893879892996275992928238267473927822842908071458615004001253689725364640218745332197193949684325045009117444305144420322306727262791661772028692282878339003762704365934004800289577330281842984752639021610948051631131667715294426506222486746991167399231712065359002684624937135104666292683300392571582114318006369240669527549778921906398165025150391936858341966461612100642410777316760090944350244793290590128450264650248409031890632308254305508002997050662323817935657933915240437753687466674399655203602238613323527681644040478912391009095458129532334285805082152412062164995784645636616440062329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networksecurityscan.bullguard.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 332aaa25619092fca688d5b7b8d7513b426fc68d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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