fupo-test.bmw-connecteddrive.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 47:65:e2:15:0a:26:2d:d7:7c:de:ba:56 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 47:65:e2:15:0a:26:2d:d7:7c:de:ba:56
Serial Number (int): 22096604848034653906854132310
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: cc:59:c2:ba:9c:9d:6e:76:a2:df:40:c9:28:bc:ff:b6:ab:b4:0d:b0
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): db:2b:97:db:91:e3:7b:ce:b1:ae:cd:96:46:b2:58:44:c8:cc:69:dd
Fingerprint (sha256): c9:02:a4:4f:33:d6:31:45:5c:d5:a1:f7:fd:cf:3e:1c:c2:d9:64:e7:eb:35:47:7b:98:a1:89:5f:6a:d3:b0:ab

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate fupo-test.bmw-connecteddrive.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fupo-test.bmw-connecteddrive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fupo-test.bmw-connecteddrive.com

Other certificates including the domain name bmw-connecteddrive.com

(limited to 100 certificates)
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
tst.bmw-connecteddrive.asia
www.bmw-connecteddrive.com
int.bmw-connecteddrive.ae
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-int.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
www.mini-connected.de
int.bmw-connecteddrive.ae
www.bmw-connecteddrive.com
www.mini-connected.de
www.mini-connected.de
tst.bmw-connecteddrive.com.au
int.bmw-connecteddrive.ae
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
tst.bmw-connecteddrive.asia
infonet3.bmwgroup.com
int.bmw-connecteddrive.ae
fupo-int.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
cdip-test.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
cdip-int.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-test.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com.au
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com.au
int.connecteddrive.com
www.bmw-connecteddrive.ae
cdip.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo-int.bmw-connecteddrive.com
cdip-test.bmw-connecteddrive.com
fupo-test.bmw-connecteddrive.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.ae
fupo.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
www.mini-connected.de
fupo-test.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-test.bmw-connecteddrive.com
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
prod.connecteddrive.com
fupo-int.bmw-connecteddrive.com
www.mini-connected.de
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo.bmw-connecteddrive.com
www.bmw-connecteddrive.com
prod.connecteddrive.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
cdip-int.bmw-connecteddrive.com
int.bmw-connecteddrive.ae

Certificate

The complete raw certificate details for fupo-test.bmw-connecteddrive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIMR2XiFQomLdd83rpWMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA2MTkyMTAxNDVaFw0y
MDA2MTkyMTAxNDVaMIGBMQswCQYDVQQGEwJERTEQMA4GA1UECBMHQmF2YXJpYTEP
MA0GA1UEBxMGTXVuaWNoMSQwIgYDVQQKExtCYXllcmlzY2hlIE1vdG9yZW4gV2Vy
a2UgQUcxKTAnBgNVBAMTIGZ1cG8tdGVzdC5ibXctY29ubmVjdGVkZHJpdmUuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHgQIuMQfEYwyO0rNZX2
cGB11ik8iROyU/yCMGaMfngBLPjgQ+c80XxxMAq2UPPFOG2ntIdrGULYnOBR/K0N
8GUpKUySM6ct7m7KXa7dhAU9jF/eTpF0YHPkBHzBCQAnsSuVC2j2VSi2BNZJwT0E
dsOnOPRGQj+V2kB1iOMaFuZfFXQi+QwIWyespwVNsJpDUmvew2I7JMfbMtkCI2+M
fCBcTF/PcEFwz2GTRUQNTbez/TCA7A9YDbeM7tGfCGG/3l8WNvnorUEmfUyC6jdB
TpOzj2MCQmO8y9TR4g0gl9Qz22XwiSYju9qXLjB/0VzMl+3TEcg+/lgrnc7kmTdR
aQIDAQABo4IB6jCCAeYwDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/
MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2Vy
dC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3Au
Z2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsG
AQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv
bS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSg
MqAwhi5odHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTgu
Y3JsMCsGA1UdEQQkMCKCIGZ1cG8tdGVzdC5ibXctY29ubmVjdGVkZHJpdmUuY29t
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/y
zXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUzFnCupydbnai30DJKLz/tqu0DbAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAQKmyCYL3CK
8a9fZuu8+/xJB3qGHd7nsWokWzg2Ho2viSLMBcg7xZuwpipB3hpUzrV+AvBj2zQg
fFgWD9k6NAK2R4Rae/a53JQBF4zTQx5018H/MLarXtwutqOs3j5SsZDmBjEH/EkH
QOFtAxJoW9sTJERe/mO4c/koRol3vnFhkZ77azroLxKZWCh7hXqQUvZO/kz49BrG
Qche7Qen8qF/ROMckP6h30utt6XVqr6bCfi20lcs9CHDWwJ/J+sTOYa+UFtQunr8
qHjr+XzrtSITYpSmWqxg7mzK3QHvyTcDEJXVdJ28T2upmhpAxbMvKrrjrNYkmTKV
S+BcY+tN810=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHgQIuMQfEYwyO0rNZX2
cGB11ik8iROyU/yCMGaMfngBLPjgQ+c80XxxMAq2UPPFOG2ntIdrGULYnOBR/K0N
8GUpKUySM6ct7m7KXa7dhAU9jF/eTpF0YHPkBHzBCQAnsSuVC2j2VSi2BNZJwT0E
dsOnOPRGQj+V2kB1iOMaFuZfFXQi+QwIWyespwVNsJpDUmvew2I7JMfbMtkCI2+M
fCBcTF/PcEFwz2GTRUQNTbez/TCA7A9YDbeM7tGfCGG/3l8WNvnorUEmfUyC6jdB
TpOzj2MCQmO8y9TR4g0gl9Qz22XwiSYju9qXLjB/0VzMl+3TEcg+/lgrnc7kmTdR
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22096604848034653906854132310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 21:01:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 21:01:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fupo-test.bmw-connecteddrive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23287053401609446706449198573161727953671005725132210222924427401595835577082590571807444000586605402718134154491818363624318411682665742405031570776881735296941288043683332759584021136440779837127300291471154657870999848205660954130083231274305653426731385998115603042240163234351732096332435407978888164258068111336670849329375391669412778295806476392854458154549962882521859904855730109519644852125660858598630690824136875474071644339098722268892382181148651911956273490500041383377618640547679811706513293861869621130595178491423911942192501032642069950163591577275805733595389234919732825823956091984102632673641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-test.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc59c2ba9c9d6e76a2df40c928bcffb6abb40db0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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