bjcpsft-joinbjc.carenet.org

- BJC Healthcare -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 89:4e:a8:75:f6:12:9c:87:80:35:8e:44:13:b1:0e:f6 was issued on by Corporation Service Company.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BJC Healthcare

Organization: BJC Healthcare
Organization unit: BJC
Organization unit: Unified Communications
Address: 4901 Forest Park Ave
Postal code: 63108
State / Province: Missouri
Locality: St. Louis
Country: US

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 89:4e:a8:75:f6:12:9c:87:80:35:8e:44:13:b1:0e:f6
Serial Number (int): 182512651368163431061929842035488001782
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:53:6e:61:18:00:14:61:9c:fd:02:f6:b1:da:5f:94:12:a8:d9:8b
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 50:f5:68:fc:9e:ae:b7:46:0b:78:10:f4:a2:8f:7e:11:98:36:20:c0
Fingerprint (sha256): d9:ad:31:89:aa:c8:97:79:ba:6f:b0:be:d3:26:4b:90:a5:3e:6a:64:b2:fc:ea:3e:3d:51:27:86:15:85:bf:44

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate bjcpsft-joinbjc.carenet.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bjcpsft-joinbjc.carenet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bjcpsft-joinbjc.carenet.org
joinbjc.carenet.org
joinbjctest.carenet.org

Other certificates including the domain name carenet.org

(limited to 100 certificates)
bcaweb.carenet.org
esstest.carenet.org
bjcpsft-prod.carenet.org
carenet.org
pswebhrtst.carenet.org
mybjcnet.carenet.org
bjcexconl01.bjc-nt.bjc.org
bjcfmdtest.bjc.org
ess.carenet.org
bjcidm.carenet.org
fmd.bjc.org
joinbjctest.carenet.org
bjcmgphysicians.carenet.org
BJCIAM.CARENET.ORG
ldmobile.carenet.org
vpn.bjc.org
smartweb.carenet.org
bjcpsft-nonprodext.carenet.org
pswebtst.carenet.org
bjcpsft-nonprodext.carenet.org
myhr.carenet.org
bjcidm.carenet.org
ctxremote.carenet.org
mytime.carenet.org
bcaweb.carenet.org
smartweb.carenet.org
mytime.carenet.org
fmdtest.bjc.org
bjcportal.bjc.org
ctxremotetest.carenet.org
BJCIAM.CARENET.ORG
myhr.carenet.org
mobileenroll.bjc.org
ess.carenet.org
bjcpsft-nonprodext.carenet.org
myhrtest.carenet.org
bjcidm.carenet.org
fmd.bjc.org
fmdtest.bjc.org
BJCIAMTEST.CARENET.ORG
bjcmgphysicians.carenet.org
joinbjc.carenet.org
mytime.carenet.org
ess.carenet.org
bjchcm.psoft.carenet.org
slchoppe.carenet.org
BJCIAMTEST.CARENET.ORG
bjcfmdtest.bjc.org
ctxremote.carenet.org
carenet.org
epicdevmgr.carenet.org
epicdevmgr.carenet.org
vpn.bjc.org
bjcris-prod.carenet.org
sni.cloudflaressl.com
bjcphysicians.carenet.org
bjchcm.carenet.org
bjcportal.bjc.org
rxprofile.bjc.org
bjcfmdtest.bjc.org
mytime.carenet.org
mybjcnet.carenet.org
BJCIAM.CARENET.ORG
BJCIAM.CARENET.ORG
ctxremote.carenet.org
joinbjctest2.carenet.org
joinbjc.carenet.org
bjcpsft-prod.carenet.org
vpn.bjc.org
wuecvfmd.carenet.org
bjcidm.carenet.org
ctxremotetest.carenet.org
joinbjctest.carenet.org
joinbjctest.carenet.org
fmd.bjc.org
epicvalidation.carenet.org
joinbjc.carenet.org
bjcpsft-joinbjc.carenet.org
carenet.org
mobileenroll.bjc.org
bjcfmdtest.bjc.org
hipobdmzt.carenet.org
joinbjctest.carenet.org
bjcris-prod.carenet.org
bjcidm.carenet.org
esstest.carenet.org
bjcportal.bjc.org
bjcportal.bjc.org
epicvalidation.carenet.org

Certificate

The complete raw certificate details for bjcpsft-joinbjc.carenet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8n8EONGk09ApL4HpRAsy
m6KBd9+aa2mTQfN0dEWCLJQ/SMparmiaSK8MT3azJ9TA76AUKbkuNc9Aa0dSN3M0
GkRSxtviU50zK6eZk1OwZOLkVynZbuFuf0hb+6J2GCuzitD289hs/tO4FkqUtVps
DoNK73vSYfWK+7tliUnEclU8dGT5eBDTsgWKGxqGCuM549gZKtksbRLtgO1/spB4
3TmXrw0IP0wQ0MPskGK+8T6TmLAuICw0tabYTUpyfebJmRhySIh15CakucVNwM2Z
mq8VAYmhvJRwWL+7dUJgD9+G6dxK1ur6w19qS6kiBeXHc367kd6mj/75yOZK0eEW
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 182512651368163431061929842035488001782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '63108'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4901 Forest Park Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BJC Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BJC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bjcpsft-joinbjc.carenet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30612303968392795558062127593661743448251632187392183933711119867184560124716764204660657715164174741988108400169353995608106600170343084004581019334557031397390765319451544263984884780934504197699759090993319996539397336663576551826023320520932836419292440554700725329589050204513678345996337552460903315166014457090240743976703937846955992393232986628649392047351229754759641616477316290664961549544718088691984657559022567213804463418609120222924059261632449444118353585273462731228876014540392914788737536575435907167269362138004039276461237909416238813584906926109692198742902137273352023539706097106233046668803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7536e61180014619cfd02f6b1da5f9412a8d98b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjcpsft-joinbjc.carenet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinbjc.carenet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinbjctest.carenet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d389e93070000040300483046022100e6ffb7726e3b4d2b38d15970cc2ab5456c7b0d5aaadcf7a90707b59a579f7ca80221008237ff5b230bf5e599fe631aad9669020f102ea086bd1bab18077fa80a88b4ea0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d389e9326000004030048304602210089a6507409704c2ba766c8b1f5c212f3c46ac85d7fe30f3cf0afdb1639e1663a022100c1bad3a7d5c1010f52e27210e7f75bcbac1f7bab505b74f81a10e2dae13a6ef3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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