vault.bankdirect.co.nz

Issued by Entrust Certification Authority - L1M

About this certificate


This digital certificate with serial number 19:54:08:42:00:00:00:00:54:cc:49:b6 was issued on by Entrust, Inc. .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • ERROR: stateOrProvinceName is required if organizationName is set

ASB Bank Limited

Company registration number: 398445
Organization: ASB Bank Limited
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Locality: Auckland
Country: NZ

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 19:54:08:42:00:00:00:00:54:cc:49:b6
Serial Number (int): 7838714010798227392209635766
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 21:58:78:46:1a:6a:29:65:b0:82:6c:b9:7a:e4:ec:42:1d:b6:ec:2e
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 4c:b5:38:63:12:b4:e2:8d:7b:bb:ae:a5:e7:c4:3d:9c:19:4e:2a:81
Fingerprint (sha256): ee:48:94:b3:b4:54:82:8c:f8:7f:90:1c:72:e2:27:4f:ed:4b:f7:af:79:84:73:5c:e5:fe:8d:1a:52:19:ce:ca

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for the current certificate on vault.bankdirect.co.nz
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: vault.bankdirect.co.nz

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHYDCCBkigAwIBAgIMGVQIQgAAAABUzEm2MA0GCSqGSIb3DQEBCwUAMIG6MQsw CQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2Vl IHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMTQg RW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MS4wLAYDVQQD EyVFbnRydXN0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gTDFNMB4XDTE1MTAw ODAwMDAxOVoXDTE3MTAwODAwMzAxOFowgaExCzAJBgNVBAYTAk5aMREwDwYDVQQH EwhBdWNrbGFuZDETMBEGCysGAQQBgjc8AgEDEwJOWjEZMBcGA1UEChMQQVNCIEJh bmsgTGltaXRlZDEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xDzANBgNV BAUTBjM5ODQ0NTEfMB0GA1UEAxMWdmF1bHQuYmFua2RpcmVjdC5jby5uejCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwLc71wltZNbs0lLKu8E4YsSGGB VyHoehuHgzRddyXka/bQt/WEK6/rdCtgCgK7LY4s0ralkrlD3Bj9DRidHQ+Rc6mm 3w94F2YDsbttN6Mp1O7SfGj2mKAG370w5GYqnwLYhEwxwC5sI2JEsASs3ZsXQLlu AiSiipWQssBAa2pix94gvrzyFwzBPuzY5aOJ+svSOmGlSqawgR3msN0C0JH88fLJ GsEnDteMni74lBDoYJ4SZL0Ncc/nyGo0V8Wp0+kgivOyFKdazQ9YOd9GW/ClTG5V 0EP7gf1P9tKhQG/9ic17L316KGyY2EVmfs6T74GdZpfdKItdNC9CaRcp2WkCAwEA AaOCA3swggN3MCEGA1UdEQQaMBiCFnZhdWx0LmJhbmtkaXJlY3QuY28ubnowggH3 BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB3AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE 0QpnrLtPT/vEAAABUETbFHAAAAQDAEgwRgIhAIsIC0LNkrs9IO1S9bPaNBjs01nT x9lRStFxl4p4xCkXAiEA/8oByyQN/6C6nez+U9QW2TDI4Tv1PLQuhhz4lauy9G8A dgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAVBE2xi9AAAEAwBH MEUCIAnkqiGdrV3e+/T9s68FHDdJ48JhwawO9/TPFk0njjFhAiEAsF5MEnh69JMz PjXHunX5Qu1so9vTX0ywcUevUUlZkfkAdgB0YbSgnPs9QddRWVdbLnZJpEWo0ncJ sMxWSmSCt+tBowAAAVBE2xtGAAAEAwBHMEUCIQDq0cqiwO5Ny2Rjikg96096hs+c lKrcCHBq3JmqfGatvAIgMyT1pNVrfAD0jh1AZJP41VfGVE1uDtT7l//LkSQxw4EA dgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVBE2xx4AAAEAwBH MEUCIEvjYc13R4objxPwlJMNIUxedZXQgySQTxKmkn1rugl5AiEA/OE/C0gB0mEM GYEE0RiqKJIrc2ZOWemSRhhX50ZgxD4wCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGG F2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlh LmVudHJ1c3QubmV0L2wxbS1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYi aHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFtLmNybDBBBgNVHSAEOjA4MDYG CmCGSAGG+mwKAQIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5l dC9ycGEwHwYDVR0jBBgwFoAUw/fQtSowra8NkSFwOVTdvIlwxzowHQYDVR0OBBYE FCFYeEYaaillsIJsuXrk7EIdtuwuMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQAD ggEBABHKu4gT9LirZNF+6FhdSL8M0x89NK+TWXPCr4PXDgS0cyu54mDXHgEEgPqW 8/+0SIdYKfyer4/j2UO4OZEj8YqC8Z6i5x+C/JSOZoYlS7/qWzhjAUCpFNZIxoMd qB716QEea5x4ew7wsTzyeBWMC+LjIg15EQMCqDKvjKcP9YPARNvwkTNlbCNWOSW6 LQYPzJTYKzeTsxBjkyslNPG5TmQ34kjUBA/A4nUySXAl+V3QAO6RFh0YAPLEiZRD XztEwxfJAPGm0dT7yN0i63RuiGcVGNjGgGQO5eIj7Y+DU9K5jWH9mqqoyjPEsCtr TK/bRfiKWrSOlP1ZUMFGFdMRbG4= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAtzvXCW1k1uzSUsq7wT hixIYYFXIeh6G4eDNF13JeRr9tC39YQrr+t0K2AKArstjizStqWSuUPcGP0NGJ0d D5FzqabfD3gXZgOxu203oynU7tJ8aPaYoAbfvTDkZiqfAtiETDHALmwjYkSwBKzd mxdAuW4CJKKKlZCywEBramLH3iC+vPIXDME+7Njlo4n6y9I6YaVKprCBHeaw3QLQ kfzx8skawScO14yeLviUEOhgnhJkvQ1xz+fIajRXxanT6SCK87IUp1rND1g530Zb 8KVMblXQQ/uB/U/20qFAb/2JzXsvfXoobJjYRWZ+zpPvgZ1ml90oi100L0JpFynZ aQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7838714010798227392209635766 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-08 00:00:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-08 00:30:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASB Bank Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '398445' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vault.bankdirect.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25758261458683004749130731932540268380786203341246560750528155089541408392160348921658135481332544623445846717053373318181630417147075279392963044096083098936945481697485686556343934820237540503714595889202289897373948138614733404745660545335376686553093655337156818835794256382576902767199385448370344270650283523576907031628991729177894862056004969685800753025141687472193433675843346206735503881715873856913644839185182075477360297039615436939850301877680681004989086435539860416867035181052913176158399402764486801237147701982100061269649949574393826136571937805536759207509807981079536915908602079908896856201577 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault.bankdirect.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 215878461a6a2965b0826cb97ae4ec421db6ec2e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0011cabb8813f4b8ab64d17ee8585d48bf0cd31f3d34af935973c2af83d70e04b4732bb9e260d71e010480fa96f3ffb448875829fc9eaf8fe3d943b8399123f18a82f19ea2e71f82fc948e6686254bbfea5b38630140a914d648c6831da81ef5e9011e6b9c787b0ef0b13cf278158c0be2e3220d79110302a832af8ca70ff583c044dbf09133656c23563925ba2d060fcc94d82b3793b31063932b2534f1b94e6437e248d4040fc0e27532497025f95dd000ee91161d1800f2c48994435f3b44c317c900f1a6d1d4fbc8dd22eb746e88671518d8c680640ee5e223ed8f8353d2b98d61fd9aaaa8ca33c4b02b6b4cafdb45f88a5ab48e94fd5950c14615d3116c6e