icab.exzumin.de

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate


This digital certificate with serial number 1f:39:bb:2b:07:cd:ac:1d:6b:8f:03:7e was issued on by GlobalSign nv-sa .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Bundesministerium fuer Arbeit und Soziales

Company registration number: Government Entities
Organization: Bundesministerium fuer Arbeit und Soziales
Address: Wilhelmstr. 49
State / Province: Berlin
Locality: Berlin
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: Berlin
Locality: Berlin
Country: DE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 1f:39:bb:2b:07:cd:ac:1d:6b:8f:03:7e
Serial Number (int): 9663827952484317557441889150
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: e5:22:a3:52:5a:55:8d:fe:02:4f:73:f5:b4:50:1f:8d:fe:c7:a3:a7
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): a1:65:92:d9:d9:bc:b3:c3:d3:3d:cf:f2:3c:35:1b:37:3a:e9:26:ac
Fingerprint (sha256): d8:a2:a2:3f:c4:30:52:c0:c8:4a:5a:36:58:73:b9:d6:35:49:9e:a7:35:70:f4:90:40:08:10:68:2c:2d:ca:d0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for the current certificate on icab.exzumin.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: icab.exzumin.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHwzCCBqugAwIBAgIMHzm7KwfNrB1rjwN+MA0GCSqGSIb3DQEBCwUAMGIxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMjAe Fw0xNTExMTgxMzAxNDJaFw0xODAyMTcwODM2MDNaMIIBGDEaMBgGA1UEDwwRR292 ZXJubWVudCBFbnRpdHkxHDAaBgNVBAUTE0dvdmVybm1lbnQgRW50aXRpZXMxEzAR BgsrBgEEAYI3PAIBAxMCREUxFzAVBgsrBgEEAYI3PAIBARMGQmVybGluMRcwFQYL KwYBBAGCNzwCAQITBkJlcmxpbjELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJlcmxp bjEPMA0GA1UEBxMGQmVybGluMRcwFQYDVQQJEw5XaWxoZWxtc3RyLiA0OTEzMDEG A1UEChMqQnVuZGVzbWluaXN0ZXJpdW0gZnVlciBBcmJlaXQgdW5kIFNvemlhbGVz MRgwFgYDVQQDEw9pY2FiLmV4enVtaW4uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkD1BqZeDH1Asl0zQlhGLOTP6SrTD9gs8zhz8yeUsX92Lmcd51 1nO3k3WCklZrHKqVukMtQxUnL9G076R0SIFFfCVilIaR5IjXj0OpE3fH047MmFG+ kKvtqcJGbbdTfSr2K6nHflpw/yoqkFcTr7pP5aAtT05d0zskUCaFVayFq7bkdFHn DUfRqM6nM6oDP5KK9IIkLEOWIpeBAtiJvCKkZQUkqGkdXCUvRyvRUt/y3W2LduLi GZAcGSjT6alseLtcdolf10qA2VfLJNmdYA0b2SLkJbkcoglAdqGZ5hcXWQHjUm8e ClphiHr2VLtG5sIQXYdZZXCZrcpS0VdhtX9NAgMBAAGjggO/MIIDuzAOBgNVHQ8B Af8EBAMCBaAwgZQGCCsGAQUFBwEBBIGHMIGEMEcGCCsGAQUFBzAChjtodHRwOi8v c2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2V4dGVuZHZhbHNoYTJnMnIy LmNydDA5BggrBgEFBQcwAYYtaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dz ZXh0ZW5kdmFsc2hhMmcyMEwGA1UdIARFMEMwQQYJKwYBBAGgMgEBMDQwMgYIKwYB BQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAkG A1UdEwQCMAAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5nbG9iYWxzaWdu LmNvbS9ncy9nc2V4dGVuZHZhbHNoYTJnMi5jcmwwGgYDVR0RBBMwEYIPaWNhYi5l eHp1bWluLmRlMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4E FgQU5SKjUlpVjf4CT3P1tFAfjf7Ho6cwHwYDVR0jBBgwFoAU2kB3Q2Uc+P6n4/Rk gj5NQxMiMQIwggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB1AGj2mPgfZIK+Oozu uSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABURqvwb8AAAQDAEYwRAIgZdjHckfR9Kpx kzmoeSnbKcyhRylS765/lHo0HmdRvnICIHDKUKBxcecG9vndfdwLW5bdf3/i+Q1t 2VDv17MV6xv7AHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFR Gq/JnwAABAMASDBGAiEA6ZzOebLqcKKjb40Xx4NPq4O18CR0FIBHmZDUw6kXoVcC IQDbe9l2RFJM/PQePUp2XE7vBD6nCs/rgBIR7TkMb0VZ/gB2AO5Lvbd1zmC64UJp H6vhnmajD35fsHLYgwDEe4l6qP3LAAABURqv2MMAAAQDAEcwRQIhAJi4pOHDEDdq H7euIJzL+cHpiXTnKphq4A5FcyswQRXHAiBLDxXsdr8eqZomGVALRInY33vS7CAe HVG9AInx5lg0vAB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAAB URqv4J8AAAQDAEgwRgIhANgLbnGl1ZXupls6uu1QyYxnaV2Ey1sGgRtdVfaRxfdR AiEAw2kGfmX6roVFZkvVWvzqUE46j/RHeDTlEtZ/Dx6PetYwDQYJKoZIhvcNAQEL BQADggEBAFS0e0gV5MNTP0PXOz9cx7WjmqmpIlr8nmbZIFcEPMIkiefakkTMBRWV 7lSDWyITi8rbxHuAtw9zyn0eTM2hpDm3/UPZ+/DffSFzB3GBnRL7Zn2nl+6Aapo2 Xjg9Azj1NAsaBQMkMekpB/97ZaoE8/Q3qo0kxWL9lRFf0f7KFmVQQB7DgPiEwpD+ X/g/EOqOo3NUe42yeZyFKCiF4hsfgYCNugVhr90PNFKB9DtSUKmPA1CxvjnITx6n 4qIV6cFVM9zDbTlv0yxQNCK2eTACEwlhx85/v/UsBHcHAhRhLmqLn++u4u6NOlQM mzTzPAAtMWSuFKUNM42CUKAVv/XvmE8= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A9QamXgx9QLJdM0JYRi zkz+kq0w/YLPM4c/MnlLF/di5nHeddZzt5N1gpJWaxyqlbpDLUMVJy/RtO+kdEiB RXwlYpSGkeSI149DqRN3x9OOzJhRvpCr7anCRm23U30q9iupx35acP8qKpBXE6+6 T+WgLU9OXdM7JFAmhVWshau25HRR5w1H0ajOpzOqAz+SivSCJCxDliKXgQLYibwi pGUFJKhpHVwlL0cr0VLf8t1ti3bi4hmQHBko0+mpbHi7XHaJX9dKgNlXyyTZnWAN G9ki5CW5HKIJQHahmeYXF1kB41JvHgpaYYh69lS7RubCEF2HWWVwma3KUtFXYbV/ TQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9663827952484317557441889150 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-18 13:01:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-17 08:36:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entities' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilhelmstr. 49' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bundesministerium fuer Arbeit und Soziales' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'icab.exzumin.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28789885208016020521586577624589753778483252986603172069648791635373859033448183789920595396443240026303077793023095813153254050670696930233131527471951783753578416673739661878460009252531693663224271226914442263490695796641655778609715886481235736063467182957329178348325526042327617794986934599967372275170277589906374738404268213675469102722096674968505407770764293013248467043901897704833366354600314344834825279905426345574988690508281860809449935675987179100315839467902388308839233305721429929818301817107018239877610653046340358559494478573307114903514108746832412711305146993793659638079775966765790312890189 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icab.exzumin.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e522a3525a558dfe024f73f5b4501f8dfec7a3a7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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