merlin.xunta.gal
- XUNTA DE GALICIA -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 01:94:3e:cd:0e:8f:7f:dd:ad:a0:63:75 was issued on by GlobalSign nv-sa.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
XUNTA DE GALICIA
Organization:
XUNTA DE GALICIA
State / Province:
La Coruña
Locality: Santiago de Compostela
Country: ES
Locality: Santiago de Compostela
Country: ES
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 01:94:3e:cd:0e:8f:7f:dd:ad:a0:63:75Serial Number (int): 488702600477981043320710005
Serial Number lenght: 89 bits, 12 octets
SubjectKeyId: db:94:b9:ac:fe:cc:5b:81:3a:27:b5:9f:14:f0:c7:fa:8f:c7:a7:be
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): 96:12:40:0d:b7:92:31:42:95:59:24:6e:35:d2:f2:ea:2c:a1:1b:da
Fingerprint (sha256): d6:a5:ca:d3:dc:90:40:6e:63:9a:a9:b7:20:d5:7e:4f:b2:51:20:13:42:f8:10:c6:40:43:10:6e:16:ba:3b:ca
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018Check the revocation status for certificate merlin.xunta.gal
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for merlin.xunta.gal
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
merlin.xunta.gal
Other certificates including the domain name xunta.gal
(limited to 100 certificates)
videoconferencia.xunta.gal
adfs.xunta.gal
correoweb.xunta.gal
resultados2024.xunta.gal
*.dev.xunta.es
www.xunta.gal
resultados2020.xunta.gal
edu.xunta.gal
videoconferencia.xunta.gal
www.edu.xunta.gal
sede.xunta.gal
egap.xunta.gal
*.edu.xunta.es
smtp.edu.xunta.gal
correoweb.xunta.gal
micollab-02.xunta.gal
www.xunta.gal
autoprovision.xunta.es
videoconferencia.xunta.gal
candidaturas.xunta.gal
*.gaiastechcloud.xunta.gal
xunta.es
descargas2024.xunta.gal
www.edu.xunta.gal
*.xunta.gal
vdi.xunta.gal
egap.xunta.gal
correoweb.xunta.gal
asiste.xunta.gal
sara.xunta.es
edu.xunta.es
igvs.xunta.gal
smtp.edu.xunta.es
rpvxg.xunta.es
cntg.xunta.gal
www.xunta.gal
senfios.xunta.gal
xunta.es
sede.xunta.gal
mmdm.xunta.gal
smtp.edu.xunta.es
luciaccn.xunta.gal
micollab-01.xunta.gal
sede.xunta.gal
micollab-03.xunta.gal
videoconferencia.xunta.gal
smtp.edu.xunta.es
imap.edu.xunta.gal
www.candidaturas.xunta.gal
*.xunta.gal
descargas2024.xunta.gal
asiste.xunta.gal
*.edu.xunta.es
egap.xunta.gal
*.stg.sara.xunta.gal
vpnxg.xunta.gal
*.xunta.gal
correoweb.xunta.es
api-lab.xeaga.xunta.gal
egap.xunta.gal
micollab-02.xunta.gal
sede.xunta.gal
micollab.xunta.gal
videoconferencia.xunta.gal
egap.xunta.gal
rpvri.xunta.es
micollab-01.xunta.gal
*.edu.xunta.es
*.xunta.gal
luciaccn.xunta.gal
rpvri.xunta.es
xunta.es
seaxes.xunta.gal
*.xunta.gal
autoprovision.xunta.es
www.xunta.gal
videoconferencia.xunta.gal
xunta.es
orzamentos.xunta.gal
sede.xunta.gal
emprego.xunta.gal
merlin.xunta.gal
keys.xunta.es
emprego.xunta.gal
sara.xunta.es
radiusedu.xunta.gal
mdm.xunta.gal
egap.xunta.gal
*.xunta.gal
*.cdticvirtual.xunta.gal
*.xunta.gal
streaming.xunta.gal
*.edu.xunta.es
correoweb.xunta.gal
*.stg.xunta.gal
*.edu.xunta.es
adfs.xunta.gal
correoweb.xunta.gal
resultados2024.xunta.gal
*.dev.xunta.es
www.xunta.gal
resultados2020.xunta.gal
edu.xunta.gal
videoconferencia.xunta.gal
www.edu.xunta.gal
sede.xunta.gal
egap.xunta.gal
*.edu.xunta.es
smtp.edu.xunta.gal
correoweb.xunta.gal
micollab-02.xunta.gal
www.xunta.gal
autoprovision.xunta.es
videoconferencia.xunta.gal
candidaturas.xunta.gal
*.gaiastechcloud.xunta.gal
xunta.es
descargas2024.xunta.gal
www.edu.xunta.gal
*.xunta.gal
vdi.xunta.gal
egap.xunta.gal
correoweb.xunta.gal
asiste.xunta.gal
sara.xunta.es
edu.xunta.es
igvs.xunta.gal
smtp.edu.xunta.es
rpvxg.xunta.es
cntg.xunta.gal
www.xunta.gal
senfios.xunta.gal
xunta.es
sede.xunta.gal
mmdm.xunta.gal
smtp.edu.xunta.es
luciaccn.xunta.gal
micollab-01.xunta.gal
sede.xunta.gal
micollab-03.xunta.gal
videoconferencia.xunta.gal
smtp.edu.xunta.es
imap.edu.xunta.gal
www.candidaturas.xunta.gal
*.xunta.gal
descargas2024.xunta.gal
asiste.xunta.gal
*.edu.xunta.es
egap.xunta.gal
*.stg.sara.xunta.gal
vpnxg.xunta.gal
*.xunta.gal
correoweb.xunta.es
api-lab.xeaga.xunta.gal
egap.xunta.gal
micollab-02.xunta.gal
sede.xunta.gal
micollab.xunta.gal
videoconferencia.xunta.gal
egap.xunta.gal
rpvri.xunta.es
micollab-01.xunta.gal
*.edu.xunta.es
*.xunta.gal
luciaccn.xunta.gal
rpvri.xunta.es
xunta.es
seaxes.xunta.gal
*.xunta.gal
autoprovision.xunta.es
www.xunta.gal
videoconferencia.xunta.gal
xunta.es
orzamentos.xunta.gal
sede.xunta.gal
emprego.xunta.gal
merlin.xunta.gal
keys.xunta.es
emprego.xunta.gal
sara.xunta.es
radiusedu.xunta.gal
mdm.xunta.gal
egap.xunta.gal
*.xunta.gal
*.cdticvirtual.xunta.gal
*.xunta.gal
streaming.xunta.gal
*.edu.xunta.es
correoweb.xunta.gal
*.stg.xunta.gal
*.edu.xunta.es
Certificate
The complete raw certificate details for merlin.xunta.gal in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIMAZQ+zQ6Pf92toGN1MA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNDAxMTgwOTA2MDFaFw0y NTAyMTgwOTA2MDBaMHkxCzAJBgNVBAYTAkVTMRMwEQYDVQQIDApMYSBDb3J1w7Fh MR8wHQYDVQQHExZTYW50aWFnbyBkZSBDb21wb3N0ZWxhMRkwFwYDVQQKExBYVU5U QSBERSBHQUxJQ0lBMRkwFwYDVQQDExBtZXJsaW4ueHVudGEuZ2FsMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkbZf9rECZ0xBQVIv0zX3hMht+NDaMiq oTdaiKy/02+eyzTZ1so+1V8z2Xej59CfulRmE31OJLMz8i1abFWajQijenXAAEpZ 32cvYOrcGdxqZNfZhMif0zh76lc4AYMSpOUnEBzwT0inb9sOEelP2PgXpT8Nazmn RR/bgrAIVKIXoQ42py6CZjB5qRQwIExEk9EHN4cw7EDfXQuYD/rYNtlA8r6+tiaQ TZ0za1vvXhAOCpSBLBXvAlG7gHYIr77esV1XT9cIohnHMgNoCDcTlL3TqzoxlPQ1 IsGlhKgdrRdNs47dpHH5g1eKcNaFjjaq85WrwKlUn8aHmkUKAP3DUwIDAQABo4IB nDCCAZgwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgY4GCCsGAQUFBwEB BIGBMH8wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20v Y2FjZXJ0L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8v b2NzcC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0w QQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNp Z24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAbBgNVHREEFDASghBtZXJsaW4u eHVudGEuZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSME GDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQU25S5rP7MW4E6J7Wf FPDH+o/Hp74wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AImzzAwcKxkAhClVyU/L5Me5Mb5gBmhIro9UitfIhhdvR1MfNKtCRKVcqAv3AAMl bCcX32DG3IDuUuWIcssS2BbYgk8OqVKGDePBRF2l6bYLvLUH8CTHIv2mgI695P6E sMEfIPTIbZ9fFMSrr1tM2QDgyADRKAs7w1I3QsHwHvjCR3mycVGvgmQKzxwm0kxh KUiAmbOk4c3vndz+QQjxMP/kk+8v9iOtbjxuzjEzDedSEhmP7JCpy2UhFSufsTfG rYUcFtqZkTA5W6SfAWRYw9J/wl/rmT2fSKLVObBI+54ZK6A4esBcMgXuLu6eeoYG ZRe3AqifJ06Wj5Wu8z1Od0M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkbZf9rECZ0xBQVIv0zX 3hMht+NDaMiqoTdaiKy/02+eyzTZ1so+1V8z2Xej59CfulRmE31OJLMz8i1abFWa jQijenXAAEpZ32cvYOrcGdxqZNfZhMif0zh76lc4AYMSpOUnEBzwT0inb9sOEelP 2PgXpT8NazmnRR/bgrAIVKIXoQ42py6CZjB5qRQwIExEk9EHN4cw7EDfXQuYD/rY NtlA8r6+tiaQTZ0za1vvXhAOCpSBLBXvAlG7gHYIr77esV1XT9cIohnHMgNoCDcT lL3TqzoxlPQ1IsGlhKgdrRdNs47dpHH5g1eKcNaFjjaq85WrwKlUn8aHmkUKAP3D UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 488702600477981043320710005 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 09:06:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-18 09:06:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Coruña' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago de Compostela' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XUNTA DE GALICIA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'merlin.xunta.gal' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25030121626696960904775596419317472375162209564982449134495209228307302147019558186821724991720603859435573223152102610798958433876569256540703824332305727863888098900871747968123476857106202363660481339342239405370245729434235115521269318922563344130964739561140342634358624630885308778451130709130997370874500216497388031742678549551676455260265997870041264972359518356778528512372080832578891207788120598605294706095541482310054248187186049552075145251579792302277825251832165019163014232263664622400349299215193185197077229633040623870216633371285486669476245430567106629329550369140315200544359780870567908721491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merlin.xunta.gal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db94b9acfecc5b813a27b59f14f0c7fa8fc7a7be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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