qa.openfoodsystem.com
- SEB Developpement -
Issued by GlobalSign Organization Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 11:21:b0:18:56:7b:ab:8b:86:e8:28:e9:57:23:fa:b5:07:21 was issued on by GlobalSign nv-sa.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
SEB Developpement
Organization:
SEB Developpement
State / Province:
Rhone-Alpes
Locality: Ecully
Country: FR
Locality: Ecully
Country: FR
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 11:21:b0:18:56:7b:ab:8b:86:e8:28:e9:57:23:fa:b5:07:21Serial Number (int): 1492372249444783292834138056099377794320161
Serial Number lenght: 141 bits, 18 octets
SubjectKeyId: 71:21:6f:cf:a2:ab:9a:1e:de:a1:f4:c2:a0:93:6a:e9:bf:20:12:85
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Fingerprint (sha1): 97:a7:b3:b0:13:14:72:64:49:bb:fe:98:cc:f0:8d:0f:c7:95:15:91
Fingerprint (sha256): d6:fb:84:d9:35:b3:e9:a6:c0:f8:a5:22:e5:d5:5d:4c:bb:02:96:de:9e:f9:b1:86:74:3b:ff:49:9f:36:e6:9b
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
Check the revocation status for certificate qa.openfoodsystem.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qa.openfoodsystem.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qa.openfoodsystem.com
docker.qa.openfoodsystem.com
jenkins.qa.openfoodsystem.com
nexus.qa.openfoodsystem.com
redmine.qa.openfoodsystem.com
sentry.qa.openfoodsystem.com
sonar.qa.openfoodsystem.com
doc-api.openfoodsystem.com
docker.qa.openfoodsystem.com
jenkins.qa.openfoodsystem.com
nexus.qa.openfoodsystem.com
redmine.qa.openfoodsystem.com
sentry.qa.openfoodsystem.com
sonar.qa.openfoodsystem.com
doc-api.openfoodsystem.com
Other certificates including the domain name openfoodsystem.com
(limited to 100 certificates)
qa.openfoodsystem.com
qa.openfoodsystem.com
*.openfoodsystem.com
qa.openfoodsystem.com
qa.openfoodsystem.com
www.openfoodsystem.com
www.openfoodsystem.com
rec.proto1.openfoodsystem.com
*.openfoodsystem.com
chercheurs.openfoodsystem.com
chercheurs.openfoodsystem.com
qa.openfoodsystem.com
pprod.dcp.groupe-seb.com
qa.openfoodsystem.com
qa.openfoodsystem.com
*.openfoodsystem.com
qa.openfoodsystem.com
*.openfoodsystem.com
qa.openfoodsystem.com
qa.openfoodsystem.com
www.openfoodsystem.com
www.openfoodsystem.com
rec.proto1.openfoodsystem.com
*.openfoodsystem.com
chercheurs.openfoodsystem.com
chercheurs.openfoodsystem.com
qa.openfoodsystem.com
pprod.dcp.groupe-seb.com
qa.openfoodsystem.com
qa.openfoodsystem.com
*.openfoodsystem.com
Certificate
The complete raw certificate details for qa.openfoodsystem.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgISESGwGFZ7q4uG6CjpVyP6tQchMA0GCSqGSIb3DQEBCwUA MGYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYD VQQDEzNHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hB MjU2IC0gRzIwHhcNMTYwMjAyMjAzODExWhcNMTYxMjEzMTEzMTA0WjBwMQswCQYD VQQGEwJGUjEUMBIGA1UECBMLUmhvbmUtQWxwZXMxDzANBgNVBAcTBkVjdWxseTEa MBgGA1UEChMRU0VCIERldmVsb3BwZW1lbnQxHjAcBgNVBAMTFXFhLm9wZW5mb29k c3lzdGVtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL8tFPa0 iXmh92DqRDUgBeXRxwiwIAA3C4+8FJHz+MrvdCcMQD3og0L0EyuX6r94qaM2ebTV uGy5s2AB0cN+/CWB9AIHVzDj2YjWrZwEsPwd+eljb4CVr71oA2Ghbw8XK2KJ7d8G SnDHK7tXILqB0LC7QmcUNuij7DkBbMA0INMvBkUs4saLyvflh+R/ZJ5zEd82UBnH rfBOMEtlo1UZB7txVvfCY/8WpZtHz/PPUz8rkmLVbwXVznvRJz7xuvaG72KJ0zSq puvgGdKUMv53arG8xa11QSfBL1RpKvlWet39uWCyO3h+37sAZ+rHQNJ/6sCROGvl Dh91PuxOuzgtT0ECAwEAAaOCAqwwggKoMA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAE QjBAMD4GBmeBDAECAjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz aWduLmNvbS9yZXBvc2l0b3J5LzCB8gYDVR0RBIHqMIHnghVxYS5vcGVuZm9vZHN5 c3RlbS5jb22CHGRvY2tlci5xYS5vcGVuZm9vZHN5c3RlbS5jb22CHWplbmtpbnMu cWEub3BlbmZvb2RzeXN0ZW0uY29tghtuZXh1cy5xYS5vcGVuZm9vZHN5c3RlbS5j b22CHXJlZG1pbmUucWEub3BlbmZvb2RzeXN0ZW0uY29tghxzZW50cnkucWEub3Bl bmZvb2RzeXN0ZW0uY29tghtzb25hci5xYS5vcGVuZm9vZHN5c3RlbS5jb22CGmRv Yy1hcGkub3BlbmZvb2RzeXN0ZW0uY29tMAkGA1UdEwQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwu Z2xvYmFsc2lnbi5jb20vZ3MvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIuY3JsMIGg BggrBgEFBQcBAQSBkzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3VyZS5nbG9i YWxzaWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJyMS5jcnQw PwYIKwYBBQUHMAGGM2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc29yZ2Fu aXphdGlvbnZhbHNoYTJnMjAdBgNVHQ4EFgQUcSFvz6Krmh7eofTCoJNq6b8gEoUw HwYDVR0jBBgwFoAUlt5h8b0cFilTHMDMfTuDAEDmGnwwDQYJKoZIhvcNAQELBQAD ggEBAFehSh41Au08TlG1/RSJrgurRZPqZQXuTnvsrT3Jk3LjwmxZA9IPQUC9UOzZ iKJCca5/oTRfOMFiFwhwMYfCTn/U6yG23yVNbV1dwNhWse9Mw/p+qYNnh7XXB6re QoiXU9+EnmLDCtzxkiJuWo2kRPkYmI1hUxsgpFbUQOLKAbhpNnArKBYFas49Ihp/ lx7HXc0aJZyQTCk8CfhYLxjNQc/cnptlabl09n14/J+SIwBJjBhFoJRnJqPLRtJX ZbSoESN390ZdVSycOMEnwCxqb8dtpeQpcl8dgnEIp7wjVQ7h+VHNg9fa+ZumFstR zoOf4SnU/BbT/azzhdEXqzBmwVA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy0U9rSJeaH3YOpENSAF 5dHHCLAgADcLj7wUkfP4yu90JwxAPeiDQvQTK5fqv3ipozZ5tNW4bLmzYAHRw378 JYH0AgdXMOPZiNatnASw/B356WNvgJWvvWgDYaFvDxcrYont3wZKcMcru1cguoHQ sLtCZxQ26KPsOQFswDQg0y8GRSzixovK9+WH5H9knnMR3zZQGcet8E4wS2WjVRkH u3FW98Jj/xalm0fP889TPyuSYtVvBdXOe9EnPvG69obvYonTNKqm6+AZ0pQy/ndq sbzFrXVBJ8EvVGkq+VZ63f25YLI7eH7fuwBn6sdA0n/qwJE4a+UOH3U+7E67OC1P QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492372249444783292834138056099377794320161 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-02 20:38:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-13 11:31:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhone-Alpes' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ecully' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SEB Developpement' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.openfoodsystem.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24133746956741497562513417563265507666167505644211399164399295595746864853147215798650516349303091832989355110202962233859724353807780171069652886723765373719644896276092513852127161435769903426724781979978438317417062826493181382413079965818687263649903013608991621192328059761544244677364738154451965093660102125637670718125292430783265513081815825159842144304100258649210331784559104821892069028136722014075957471609847768249626306157354036336602681437682057109295436796030715725435864189533701386919494705467754022886833836986467333668497816165732291960269882475538697450939155539755508186769314156926019207778113 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.openfoodsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docker.qa.openfoodsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.qa.openfoodsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.qa.openfoodsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.qa.openfoodsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentry.qa.openfoodsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonar.qa.openfoodsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc-api.openfoodsystem.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 71216fcfa2ab9a1edea1f4c2a0936ae9bf201285 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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