rree.go.cr
- Ministerio de Relaciones Exteriores y Culto -
Issued by GlobalSign Extended Validation CA - SHA256 - G3
About this certificate
This digital certificate with serial number 31:3e:8a:96:f1:b2:6d:15:2d:b5:f6:c1 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Ministerio de Relaciones Exteriores y Culto
Company registration number:
Government Entities
Organization: Ministerio de Relaciones Exteriores y Culto
Organization unit: Ministerio de Relaciones Exteriores y Culto
Organization: Ministerio de Relaciones Exteriores y Culto
Organization unit: Ministerio de Relaciones Exteriores y Culto
Address:
Avenida 7-9, Calle 11-13
State / Province: San Jose
Locality: San Jose
Country: CR
State / Province: San Jose
Locality: San Jose
Country: CR
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 31:3e:8a:96:f1:b2:6d:15:2d:b5:f6:c1Serial Number (int): 15240373353064365090542057153
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 5f:8d:90:c3:e6:51:4a:89:7e:de:ad:29:7a:59:ed:60:8f:86:75:a1
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d
Fingerprint (sha1): 1d:7a:64:cd:f0:40:79:30:b7:33:74:59:2e:d5:f0:08:35:46:aa:ca
Fingerprint (sha256): ca:48:b9:73:41:4f:8a:24:1d:a8:fe:5f:d8:fb:e6:67:40:db:2f:61:77:c4:f6:c9:29:42:88:0c:3e:88:4a:53
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3Check the revocation status for certificate rree.go.cr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rree.go.cr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rree.go.cr
www.rree.go.cr
www.rree.go.cr
Other certificates including the domain name rree.go.cr
(limited to 100 certificates)
email.rree.go.cr
go.sheech.app
bienesraicesaustin.com
siibci.rree.go.cr
heresy.in
www.rree.go.cr
www.rree.go.cr
www.rree.go.cr
rree.go.cr
www.rree.go.cr
www.trabzonkoprubasi.bel.tr
email.rree.go.cr
docs.jodacare.com
rree.go.cr
email.rree.go.cr
links-meetnorth.westlinkclient.com
rree.go.cr
rree.go.cr
www.rree.go.cr
email.rree.go.cr
turinghut.org
www.rree.go.cr
go.sheech.app
bienesraicesaustin.com
siibci.rree.go.cr
heresy.in
www.rree.go.cr
www.rree.go.cr
www.rree.go.cr
rree.go.cr
www.rree.go.cr
www.trabzonkoprubasi.bel.tr
email.rree.go.cr
docs.jodacare.com
rree.go.cr
email.rree.go.cr
links-meetnorth.westlinkclient.com
rree.go.cr
rree.go.cr
www.rree.go.cr
email.rree.go.cr
turinghut.org
www.rree.go.cr
Certificate
The complete raw certificate details for rree.go.cr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIMMT6KlvGybRUttfbBMA0GCSqGSIb3DQEBCwUAMGIxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMzAe Fw0xOTEwMzEwMTEyMDFaFw0yMTEwMzAyMTUxMDNaMIIBJjEaMBgGA1UEDwwRR292 ZXJubWVudCBFbnRpdHkxHDAaBgNVBAUTE0dvdmVybm1lbnQgRW50aXRpZXMxEzAR BgsrBgEEAYI3PAIBAxMCQ1IxCzAJBgNVBAYTAkNSMREwDwYDVQQIEwhTYW4gSm9z ZTERMA8GA1UEBxMIU2FuIEpvc2UxITAfBgNVBAkTGEF2ZW5pZGEgNy05LCBDYWxs ZSAxMS0xMzE0MDIGA1UECxMrTWluaXN0ZXJpbyBkZSBSZWxhY2lvbmVzIEV4dGVy aW9yZXMgeSBDdWx0bzE0MDIGA1UEChMrTWluaXN0ZXJpbyBkZSBSZWxhY2lvbmVz IEV4dGVyaW9yZXMgeSBDdWx0bzETMBEGA1UEAxMKcnJlZS5nby5jcjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAM4IKaQoqevxHOz1WoMhJ6lzvY0A0DPf SqrlBG1LZa0YmJQV59nSB3vyApFnC2gSqSacdgnG1Lf9iqIi37H53tuhcTlmI/DX Zn/hHUHGj3dgsEN7F9HDhRnj8Viw4VEr4gVWypAmVHo1xTH/Bc9OkGMi/gdAwEV0 EHQewxDrgJ05goHYrcVWC3LQScLNBALZCK7/cZQfWe7seQIw/0Hjh5wwu9U1PF7r ROAk1SlTDcl2qxaC0mrjA1/G7mFw9X/gHrmc0Nz0CvtvTBLw+f6x66s3ajODmQpS JbJsxjUCOUWOGpy0gA9HB9LECPYdmODjGqrd7ZsWQgiq/sHkEW0Sli0CAwEAAaOC AxYwggMSMA4GA1UdDwEB/wQEAwIFoDCBlgYIKwYBBQUHAQEEgYkwgYYwRwYIKwYB BQUHMAKGO2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZXh0 ZW5kdmFsc2hhMmczcjMuY3J0MDsGCCsGAQUFBzABhi9odHRwOi8vb2NzcDIuZ2xv YmFsc2lnbi5jb20vZ3NleHRlbmR2YWxzaGEyZzNyMzBVBgNVHSAETjBMMEEGCSsG AQQBoDIBATA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv bS9yZXBvc2l0b3J5LzAHBgVngQwBATAJBgNVHRMEAjAAMCUGA1UdEQQeMByCCnJy ZWUuZ28uY3KCDnd3dy5ycmVlLmdvLmNyMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAfBgNVHSMEGDAWgBTds+dtqC7oxU5uz3TmdTyUFc7oHTAdBgNVHQ4E FgQUX42Qw+ZRSol+3q0pelntYI+GdaEwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB ZwB2AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABbh9enEcAAAQD AEcwRQIhALouM2SFo3YDG8WeokLhC6obEpppw8E2xY/4O/gibR5CAiBK2w2BfD6j 40/VjNyYPMhiucfUXBwHVWnWE9m+6TA0IgB1APZclC/RdzAiFFQYCDCUVo7jTRMZ M7/fDC8gC8xO8WTjAAABbh9emWYAAAQDAEYwRAIhANmDsA5cUktM0AR4R8wlcA13 wo19I40tA+6etaReEVw8Ah9vpPKpM/huh15kbQkZdj0GmTEKfb7N2WDpnkc0BPGn AHYA7sCV7o1yZA+S48O5G8cSo2lqCXtLahoUOOZHssvtxfkAAAFuH16cYAAABAMA RzBFAiBMnp4pw7wWfipUKQ2lgPoxM67O6ku+JA3PHw1nAPb1rAIhAO/4vK0Cd3QA 3VwzBkk3rZpYqpd4nJmKilrWC+cipdlMMA0GCSqGSIb3DQEBCwUAA4IBAQCaC6Xh Vihd6GoBJjB/OnOH7XgeS93rmAPaYj9xBEWDiiP10XMroUa265rt7T/WYyAAs0ko IJEPxLf5QPx34F4kTuipMB4Cl3UHHMiASu2x8Ba/Ebdq7p+APz9n43K4X4O2QRCd ixNU2RQFIe/k1zc5z9BSJJVtVxMXeryTIpHNHX8b4/xDwYGXLCtsrveb9NbS2mk8 JeSZltnn3L345sCzE2IilV0DFDMx3/GtsNLt4Pcfe+Phefg9MUEKcth9g+LkFdrL gWo/qkx41jvlVWEknHHEio8szHE/J19R6yMSzgHG31oFTHhERoTjxeFZqIaiWY3g jY9ZutR61fFed6h3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzggppCip6/Ec7PVagyEn qXO9jQDQM99KquUEbUtlrRiYlBXn2dIHe/ICkWcLaBKpJpx2CcbUt/2KoiLfsfne 26FxOWYj8Ndmf+EdQcaPd2CwQ3sX0cOFGePxWLDhUSviBVbKkCZUejXFMf8Fz06Q YyL+B0DARXQQdB7DEOuAnTmCgditxVYLctBJws0EAtkIrv9xlB9Z7ux5AjD/QeOH nDC71TU8XutE4CTVKVMNyXarFoLSauMDX8buYXD1f+AeuZzQ3PQK+29MEvD5/rHr qzdqM4OZClIlsmzGNQI5RY4anLSAD0cH0sQI9h2Y4OMaqt3tmxZCCKr+weQRbRKW LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15240373353064365090542057153 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 01:12:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-30 21:51:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entities' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avenida 7-9, Calle 11-13' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministerio de Relaciones Exteriores y Culto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministerio de Relaciones Exteriores y Culto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rree.go.cr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26009115981223660273287092854292921860923249119075955689881975357356527157210686968961721189274687874149984753747608171927967942294869585614086673644238080005567004785199014287621363945034943589633567024643370648982967023356046673599423265159438096555921936540214692431188561466352828446029103850331120825316507526916098236923860344681592834230024877422021884229938735775318549031096420286052438518559728049142614709170706422022784288587334409050455372062732345679374544660179054572677572072927676883448989473392905789967352708472123315262734860720183693478567524563598301649288962789842195376797492187407307112617517 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rree.go.cr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rree.go.cr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5f8d90c3e6514a897edead297a59ed608f8675a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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