*.bravenewworld.wine
Issued by AlphaSSL CA - SHA256 - G4
About this certificate
This digital certificate with serial number 3f:aa:76:be:ab:29:a9:8d:84:d7:05:e7 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.bravenewworld.wine
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 3f:aa:76:be:ab:29:a9:8d:84:d7:05:e7Serial Number (int): 19703633764539154392126260711
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 01:b9:59:c7:79:bb:3f:1b:f0:a0:0b:b3:eb:b2:ce:e3:e4:da:d9:98
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15
Fingerprint (sha1): 81:b7:6f:8c:6f:03:b8:5c:cb:85:41:df:d9:57:d1:0b:a8:eb:bd:1d
Fingerprint (sha256): d2:d0:33:40:82:01:2a:98:8f:e3:ba:a6:8b:53:04:75:b6:cb:cc:80:6d:f9:2d:65:8e:4a:0f:63:cb:d1:e7:f2
Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl
Check the revocation status for certificate *.bravenewworld.wine
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bravenewworld.wine
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bravenewworld.wine
bravenewworld.wine
bravenewworld.wine
Other certificates including the domain name bravenewworld.wine
(limited to 100 certificates)
*.bravenewworld.wine
shop.bravenewworld.wine
shop.bravenewworld.wine
app.proshopsportscards.com
store.bravenewworld.wine
forms.mlogica.com
store.bravenewworld.wine
adesao.asurya.pt
*.bravenewworld.wine
shop.bravenewworld.wine
forms.mianrosolar.com
*.bravenewworld.wine
shop.bravenewworld.wine
forms.neurobounce.com
*.bravenewworld.wine
shop.bravenewworld.wine
store.bravenewworld.wine
*.bravenewworld.wine
forms.dealbeds.com
forms.mlogica.com
*.bravenewworld.wine
*.bravenewworld.wine
forms.migrationlaw.com
store.bravenewworld.wine
earlyaccess.embr.org
survey.wundercapital.com
*.bravenewworld.wine
*.bravenewworld.wine
partners.oneway.ng
*.bravenewworld.wine
forms.mlogica.com
*.bravenewworld.wine
*.bravenewworld.wine
shop.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
adesao.asurya.pt
*.bravenewworld.wine
store.bravenewworld.wine
*.bravenewworld.wine
forms.docninja.io
*.bravenewworld.wine
forms.mlogica.com
*.bravenewworld.wine
store.bravenewworld.wine
shop.bravenewworld.wine
*.bravenewworld.wine
survey.resolu.com.au
survey.beaconstrategiesllc.com
shop.bravenewworld.wine
forms.mlogica.com
*.bravenewworld.wine
store.bravenewworld.wine
forms.bravenewworld.wine
shop.bravenewworld.wine
shop.bravenewworld.wine
shop.bravenewworld.wine
adesao.asurya.pt
*.bravenewworld.wine
*.bravenewworld.wine
survey.zeustekdev.com
*.bravenewworld.wine
store.bravenewworld.wine
forms.rentalmanager.com
*.bravenewworld.wine
forms.rentalmanager.com
forms.mlogica.com
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
shop.bravenewworld.wine
shop.bravenewworld.wine
app.proshopsportscards.com
store.bravenewworld.wine
forms.mlogica.com
store.bravenewworld.wine
adesao.asurya.pt
*.bravenewworld.wine
shop.bravenewworld.wine
forms.mianrosolar.com
*.bravenewworld.wine
shop.bravenewworld.wine
forms.neurobounce.com
*.bravenewworld.wine
shop.bravenewworld.wine
store.bravenewworld.wine
*.bravenewworld.wine
forms.dealbeds.com
forms.mlogica.com
*.bravenewworld.wine
*.bravenewworld.wine
forms.migrationlaw.com
store.bravenewworld.wine
earlyaccess.embr.org
survey.wundercapital.com
*.bravenewworld.wine
*.bravenewworld.wine
partners.oneway.ng
*.bravenewworld.wine
forms.mlogica.com
*.bravenewworld.wine
*.bravenewworld.wine
shop.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
adesao.asurya.pt
*.bravenewworld.wine
store.bravenewworld.wine
*.bravenewworld.wine
forms.docninja.io
*.bravenewworld.wine
forms.mlogica.com
*.bravenewworld.wine
store.bravenewworld.wine
shop.bravenewworld.wine
*.bravenewworld.wine
survey.resolu.com.au
survey.beaconstrategiesllc.com
shop.bravenewworld.wine
forms.mlogica.com
*.bravenewworld.wine
store.bravenewworld.wine
forms.bravenewworld.wine
shop.bravenewworld.wine
shop.bravenewworld.wine
shop.bravenewworld.wine
adesao.asurya.pt
*.bravenewworld.wine
*.bravenewworld.wine
survey.zeustekdev.com
*.bravenewworld.wine
store.bravenewworld.wine
forms.rentalmanager.com
*.bravenewworld.wine
forms.rentalmanager.com
forms.mlogica.com
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
*.bravenewworld.wine
Certificate
The complete raw certificate details for *.bravenewworld.wine in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIMP6p2vqspqY2E1wXnMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMTEyODA2MTE0MloXDTI0MTIy OTA2MTE0MVowHzEdMBsGA1UEAwwUKi5icmF2ZW5ld3dvcmxkLndpbmUwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNTszxJlj6MjXy8pweXxVCHbI5mWaK YTVmTn3TqT4EKAI/qZkPiFIj/RZY0YPS/ozTOvz4gz6VqAuJTI2aPMw2tyuKC0/U pHVQZNUwpmxIPvzuxizNRD9+K+EWNTLzLUyWNd5Xh6fmviR1aOiiZqglWzJ00H9/ YXXmm1bDIPbvC0sRTi0xR8TGCo6EeN7Oxz0z9lEyBqXnGGDj1ovG5mNJ4+TKBXCP MdgXA5acZmqPP2E5Em6DG5y8HAP1/44+JUClReAZvh4I20qMdWhDXw1G2yDNgOrQ xmcqeC65uaaZmdMT6xthOENwCERCsrf2XEjT0qc65l0Izf661FwxANiDAgMBAAGj ggNpMIIDZTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADCBkwYIKwYBBQUH AQEEgYYwgYMwRgYIKwYBBQUHMAKGOmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5j b20vY2FjZXJ0L2FscGhhc3NsY2FzaGEyNTZnNC5jcnQwOQYIKwYBBQUHMAGGLWh0 dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2FscGhhc3NsY2FzaGEyNTZnNDBXBgNV HSAEUDBOMAgGBmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0 dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMEEGA1UdHwQ6MDgw NqA0oDKGMGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vYWxwaGFzc2xjYXNoYTI1 Nmc0LmNybDAzBgNVHREELDAqghQqLmJyYXZlbmV3d29ybGQud2luZYISYnJhdmVu ZXd3b3JsZC53aW5lMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNV HSMEGDAWgBRPy6yowu+r3YNva7/OmD1cWCV2FTAdBgNVHQ4EFgQUAblZx3m7Pxvw oAuz67LO4+Ta2ZgwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AD8XS0/XIkdY lB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjBSOD6wAAAQDAEcwRQIgHDSYrcEC PIXddpjekvqWxraGyxP40mGbXvTS4FtKY6gCIQC8ql733mu4IIoG4X+Hpr8isDiw s7oCMINlqEcRFA3i8gB2AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJc AAABjBSOD5IAAAQDAEcwRQIgILA9iYnD91CvsxZnzUY77UArmpHqbcBna4CPyl6Q 9CwCIQDaye9RP5UwEV9UPT9rOw38/Gx2ukQLwCwQEf9Cv0nxVQB1AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjBSOD4QAAAQDAEYwRAIgIl0hv+BD q/dlDDiGuZMXjCyOw4ubiuqyS14+Z/oVkIMCIHdtqQfTPpphmb67weh5Uk3YJXLz 44Wy0wTJ3d8z70AYMA0GCSqGSIb3DQEBCwUAA4IBAQCBvjediiEgeTNeuB9ovAzX 4KjtGKNZkkXGQ8M0AZva09JspbOZHWk61DA7Xf0vl2vdcxx1rhMP5LRhmOYnUujw +WeoAy+ItkttyegcSk2FvXMQWY69vZsRw2ojEYIIzg/e36ruSeq4rr4qzXTLpoEC ttqAZjzywW53LXPQF3tQ1+X/ocKlO8pD7DRLnlnMatCwP7ndqJqZ4DLHznU9CSdV N1L/bvTT+tIGE1BJJO26gFmzP1z2TyDJxAHIeLfVZ80Ex4t8VdNLOGlLJGB1DrxE GEUFlPw0K5NRhD5SFvMALiEk+b0g/HlRz8kQHM3MPs7L+EfmvviuVeEveYzGc2Wk -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU7M8SZY+jI18vKcHl8V Qh2yOZlmimE1Zk5906k+BCgCP6mZD4hSI/0WWNGD0v6M0zr8+IM+lagLiUyNmjzM NrcrigtP1KR1UGTVMKZsSD787sYszUQ/fivhFjUy8y1MljXeV4en5r4kdWjoomao JVsydNB/f2F15ptWwyD27wtLEU4tMUfExgqOhHjezsc9M/ZRMgal5xhg49aLxuZj SePkygVwjzHYFwOWnGZqjz9hORJugxucvBwD9f+OPiVApUXgGb4eCNtKjHVoQ18N RtsgzYDq0MZnKnguubmmmZnTE+sbYThDcAhEQrK39lxI09KnOuZdCM3+utRcMQDY gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19703633764539154392126260711 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 06:11:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-29 06:11:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bravenewworld.wine' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17838459001971641508784527384525241373233843012147771892399700355883210221236435652421934970786865894231652581740933623789626496937725555158966748716642433258603790897228855624558918945651588715029501390001056361354837926144530874580690548692702634908785210458567073352405048878398134136206912853998847921931010272311557442594045783407718106677384728575753688383703950786780203052790413064090175840350150556012939820532585900867022917730509791467114210924428594999058326602691745279892260035740304784831027450226945207812507643264787364373584178436298483401009395271785788559054845205867255984510027203127082399881347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravenewworld.wine' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravenewworld.wine' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 01b959c779bb3f1bf0a00bb3ebb2cee3e4dad998 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 01670076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c148e0fac000004030047304502201c3498adc1023c85dd7698de92fa96c6b686cb13f8d2619b5ef4d2e05b4a63a8022100bcaa5ef7de6bb8208a06e17f87a6bf22b038b0b3ba02308365a84711140de2f2007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018c148e0f920000040300473045022020b03d8989c3f750afb31667cd463bed402b9a91ea6dc0676b808fca5e90f42c022100dac9ef513f9530115f543d3f6b3b0dfcfc6c76ba440bc02c1011ff42bf49f155007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c148e0f8400000403004630440220225d21bfe043abf7650c3886b993178c2c8ec38b9b8aeab24b5e3e67fa1590830220776da907d33e9a6199bebbc1e879524dd82572f3e385b2d304c9dddf33ef4018 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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