www.bsmweb.sm

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate


This digital certificate with serial number 52:e4:18:c1:85:82:b3:26:f9:4d:fe:7e was issued on by GlobalSign nv-sa .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Banca di San Marino SPA

Company registration number: SM00476
Organization: Banca di San Marino SPA
Organization unit: Security
Address: Strada della Croce, 0039
State / Province: San Marino
Locality: Faetano
Country: SM

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: San Marino
Locality: Faetano
Country: SM

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 52:e4:18:c1:85:82:b3:26:f9:4d:fe:7e
Serial Number (int): 25653522798860074918683213438
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 65:16:fa:c5:53:a1:96:4d:c2:7e:b2:4b:75:5e:a0:7b:01:67:e6:bb
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): 49:85:a1:8f:fb:5b:9b:38:bb:da:c0:08:2b:2a:8b:e6:22:dc:e3:3f
Fingerprint (sha256): d9:23:19:2c:d4:f0:27:b4:87:16:3d:c7:c0:99:9c:e2:d5:30:e1:55:a9:68:c6:b1:e5:d7:39:8d:34:8d:6b:b8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for the current certificate on www.bsmweb.sm
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bsmweb.sm
bsmweb.sm

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIIFDCCBvygAwIBAgIMUuQYwYWCsyb5Tf5+MA0GCSqGSIb3DQEBCwUAMGIxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMjAe Fw0xNjAyMTAyMzAwMDBaFw0xNzAyMTEyMjU5NTlaMIHqMR0wGwYDVQQPDBRQcml2 YXRlIE9yZ2FuaXphdGlvbjEQMA4GA1UEBRMHU00wMDQ3NjETMBEGCysGAQQBgjc8 AgEDEwJTTTELMAkGA1UEBhMCU00xEzARBgNVBAgTClNhbiBNYXJpbm8xEDAOBgNV BAcTB0ZhZXRhbm8xITAfBgNVBAkTGFN0cmFkYSBkZWxsYSBDcm9jZSwgMDAzOTER MA8GA1UECxMIU2VjdXJpdHkxIDAeBgNVBAoTF0JhbmNhIGRpIFNhbiBNYXJpbm8g U1BBMRYwFAYDVQQDEw13d3cuYnNtd2ViLnNtMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1HbQMs8kemssHs9KgERtlR+kcFGF4DOFp7Sa2tbkGoqY3PYU FPCTTSt89ZB/TcBsCuiXZMgiTbX1dryb1rVn4swqwu0SCJ85klNiyjZr/SSQ5fX2 kCyHIu4QpFWvdZfGzGjN/dL0LJBtuIoBdjODKu6YA/2PJQjVhaiYLZrzpf4zlSpX tmUvc5ssZg23OWCav1BTzMaTiB8A4u+zZc61fkWZX3bLItC2iiEAzwWvMy290yWL vxO87Hnd89jcxtvrTlbK66TZuVygUW2ICKW6XmOreAUTQo9viMQpAJuO8df2AiJe /MEVvwdZ7DBhwR7dTG2kO72gExOWIhfGW/56pwIDAQABo4IEPzCCBDswDgYDVR0P AQH/BAQDAgWgMIGUBggrBgEFBQcBAQSBhzCBhDBHBggrBgEFBQcwAoY7aHR0cDov L3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NleHRlbmR2YWxzaGEyZzJy Mi5jcnQwOQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9n c2V4dGVuZHZhbHNoYTJnMjBMBgNVHSAERTBDMEEGCSsGAQQBoDIBATA0MDIGCCsG AQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAJ BgNVHRMEAjAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuZ2xvYmFsc2ln bi5jb20vZ3MvZ3NleHRlbmR2YWxzaGEyZzIuY3JsMCMGA1UdEQQcMBqCDXd3dy5i c213ZWIuc22CCWJzbXdlYi5zbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwHQYDVR0OBBYEFGUW+sVToZZNwn6yS3VeoHsBZ+a7MB8GA1UdIwQYMBaAFNpA d0NlHPj+p+P0ZII+TUMTIjECMIICbgYKKwYBBAHWeQIEAgSCAl4EggJaAlgAdgBo 9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVJklXk6AAAEAwBHMEUC IQDvc3mt4u4NuGxflYRxS4l2bt8LGwpHv3TNbDV2B7M2EwIgEljz28Y723SrkqcO TgjkjBCbBnPQhScwJzzW6DR8Is4AdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jj d80OyA3cEAAAAVJklX0gAAAEAwBIMEYCIQCDto4L20KCc77fDBrZckjs8NaiJsoL 9u55Nmbegu6I9gIhAN3JDaKWGVwnZnyxymhafrrGLDYn8is5xg2wgF0WnUSEAHYA 7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFSZJWK9gAABAMARzBF AiEAjR+c7EoX4TmZEYlSnvvtleQL7m2HjGibLIWpW1Vl3J4CIE25rbHnbUzmPJVZ 2K/vFLH7Fi4HXkqbCaq0/o07UVo8AHYAzbUXm3/BwEb+6jETaj+PAC5hgvr4iW/s yLL1tatgSQAAAAFSZJWOugAABAMARzBFAiEArFOZmcldWnFGn+GQhtsfKFUIcjY/ z/jPLBrZSGhsU+gCIAhn79EmZm4NcxQRITXlAl38GAQ2XChNw4hHPBkw2ZibAHUA VhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFSZJWSdwAABAMARjBE AiEA3dZ5CoTMC/FnAZkfV7BXnZ89n/DR6fuAFdLJzoWU8zsCH1VB/uP7F3vC8ifK HN6ObvNTOJ5Wo8pf/Uhy1SZhGa8wDQYJKoZIhvcNAQELBQADggEBAIXS89S836CT 3hWWO9xn9S3UrWhfYprHEewUYPXiywfpZOGF+HzDATvy+44NbBkdbqfoOTHVuMvX krZjCAK3GxN0B6+OBf6Slpn2vRecbAidLLm+Onnx8T5CWnxDbK1L+xZuM0KSmQve 1IkKr/1d6FdXdOzRCVEsWkFvbii3n3buFw1tmKkXn3/i2imBBg9NZSKjBheEJg8K ThBurH08FObrxRSYjzWrKbHA+lvuRDwBHi2B7+tCXTtHViOxUqJ58h+Rq4FFyBe9 KyZnN+tjpuLfbRVzKHgMN1pJm/XCYfnN8PeEAx2orwqkmTDsat8Og+kR4GqGkXQu JvWfhalRiHs= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HbQMs8kemssHs9KgERt lR+kcFGF4DOFp7Sa2tbkGoqY3PYUFPCTTSt89ZB/TcBsCuiXZMgiTbX1dryb1rVn 4swqwu0SCJ85klNiyjZr/SSQ5fX2kCyHIu4QpFWvdZfGzGjN/dL0LJBtuIoBdjOD Ku6YA/2PJQjVhaiYLZrzpf4zlSpXtmUvc5ssZg23OWCav1BTzMaTiB8A4u+zZc61 fkWZX3bLItC2iiEAzwWvMy290yWLvxO87Hnd89jcxtvrTlbK66TZuVygUW2ICKW6 XmOreAUTQo9viMQpAJuO8df2AiJe/MEVvwdZ7DBhwR7dTG2kO72gExOWIhfGW/56 pwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 25653522798860074918683213438 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-10 23:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-11 22:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SM00476' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Marino' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Faetano' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strada della Croce, 0039' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Banca di San Marino SPA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bsmweb.sm' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26821109662490302752859728937483658548076442167273460959415176306388729755435631258032662166814102765225455906707499918259178493572564739192705327470336588555264160638774231267910811969957707687517301764987934264477785427482722811165842639342927104259779395659313977110843339384009013501620625853530841368704165842850717217382754757240204913953045013797407566193938066557297447159226890460234315808039590505689453720172366245880041035217401654571984258820795137101996186184950811530504643991817549160963570821352194269365015095671078243867517041962817233333554686776871632904882552748598169037884476449843189865413287 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsmweb.sm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsmweb.sm' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6516fac553a1964dc27eb24b755ea07b0167e6bb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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