www.checksbydeluxe.com

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate


This digital certificate with serial number 71:fb:51:44:b8:fa:8b:27:f3:d6:4e:de was issued on by GlobalSign nv-sa .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Deluxe Corporation

Company registration number: 59-AA
Organization: Deluxe Corporation
Address: 3680 Victoria St. N
State / Province: Minnesota
Locality: Shoreview
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
State / Province: Minnesota
Locality: Shoreview
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 71:fb:51:44:b8:fa:8b:27:f3:d6:4e:de
Serial Number (int): 35275630269928093193130626782
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 70:3b:2b:aa:72:59:58:61:1d:21:ca:a6:4f:7c:42:7a:c6:b7:8b:5b
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): a2:02:74:f6:2d:69:d6:a1:5f:ee:bd:f7:ce:3a:0f:9e:30:09:7b:19
Fingerprint (sha256): ef:72:69:82:06:f6:46:2b:84:f9:10:a2:df:a6:30:66:c3:8d:ba:66:29:05:7f:85:8c:83:53:6b:4c:71:56:0e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for the current certificate on www.checksbydeluxe.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.checksbydeluxe.com
checksbydeluxe.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHtjCCBp6gAwIBAgIMcftRRLj6iyfz1k7eMA0GCSqGSIb3DQEBCwUAMGIxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTgwNgYDVQQDEy9H bG9iYWxTaWduIEV4dGVuZGVkIFZhbGlkYXRpb24gQ0EgLSBTSEEyNTYgLSBHMjAe Fw0xNTA5MjExOTE3MDJaFw0xNjA5MDExNjM1MDFaMIHxMR0wGwYDVQQPDBRQcml2 YXRlIE9yZ2FuaXphdGlvbjEOMAwGA1UEBRMFNTktQUExEzARBgsrBgEEAYI3PAIB AxMCVVMxGjAYBgsrBgEEAYI3PAIBAhMJTWlubmVzb3RhMQswCQYDVQQGEwJVUzES MBAGA1UECBMJTWlubmVzb3RhMRIwEAYDVQQHEwlTaG9yZXZpZXcxHDAaBgNVBAkT EzM2ODAgVmljdG9yaWEgU3QuIE4xGzAZBgNVBAoTEkRlbHV4ZSBDb3Jwb3JhdGlv bjEfMB0GA1UEAxMWd3d3LmNoZWNrc2J5ZGVsdXhlLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALpCGIe8psAuIfyIwSuOYpdbqFmVpsMVzpYHkq+Q 5Nvx9gLq+1jX+oWjFTSMys7fy6/23SsdQSc4dg/0IUVyPrLN4ZlF4laAXv6JhxQY n4w2w089kiop32WoQD+Ph1HyFk9TUU5oTyIQXLXJuDZFlEicKYEgTd7JF1pwOG7w h+eL2oNHy/RQleGkDvYulhI6n/ZWcW4ya2ZyzKl2WsGpX5vllDlAp6ZnONhvgCco ySzWPi/00IKNwT9pED8XNaqpAWT8KYLeOJmpAlMKV5PBB+47fqwdlzkbGdpb40Kl G+WoZyu5E/irY7PfcfNprwV9La53dRh89b3l8ZuvH+skP0UCAwEAAaOCA9owggPW MA4GA1UdDwEB/wQEAwIFoDCBlAYIKwYBBQUHAQEEgYcwgYQwRwYIKwYBBQUHMAKG O2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZXh0ZW5kdmFs c2hhMmcycjIuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcDIuZ2xvYmFsc2ln bi5jb20vZ3NleHRlbmR2YWxzaGEyZzIwTAYDVR0gBEUwQzBBBgkrBgEEAaAyAQEw NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np dG9yeS8wCQYDVR0TBAIwADBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzL2dzZXh0ZW5kdmFsc2hhMmcyLmNybDA1BgNVHREELjAs ghZ3d3cuY2hlY2tzYnlkZWx1eGUuY29tghJjaGVja3NieWRlbHV4ZS5jb20wHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRwOyuqcllYYR0h yqZPfEJ6xreLWzAfBgNVHSMEGDAWgBTaQHdDZRz4/qfj9GSCPk1DEyIxAjCCAfcG CisGAQQB1nkCBAIEggHnBIIB4wHhAHcAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETR Cmesu09P+8QAAAFP8VaImwAABAMASDBGAiEAhr/mNF5vfNNwciRxygUjcm5t0xN9 VovO1a666UdX4xECIQDNgWykC+Agj/CCBJhROFibyFwu9YW0U68ifq4CTEDJ4wB2 AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABT/FWjmMAAAQDAEcw RQIhAOZYoU8YzhIYDGFflKLju9z5bUSUvvHrDDcnc8BU4xGgAiAYeWa4aHg7apB1 TugKA+cUBjdXVPejZKU9qw9cxP0sCgB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLY gwDEe4l6qP3LAAABT/FWoekAAAQDAEcwRQIhAL1ek3Se+jSMCce0DNx+4DD1BTkR U4GnGLYWP8nKouxyAiArCQfsUdDUPHT41DbBP93V1zu9rgkurWRTqt6P4zKKrgB2 AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABT/FWqQgAAAQDAEcw RQIgEzQhT1XzG4R/GmpO0iP5JHD1UzmF9n0ALlm4ImDcv8gCIQDqI22drqmZMhFX jH6dsYlwnKBLQI83RibLkThEJtKsgTANBgkqhkiG9w0BAQsFAAOCAQEAJCWUTXS6 4gE5WhmYlMvF0CW62wwD/37CXLUq7LHngBT3wkZpKOacxfagc1SG310vLcSsk4qo 1gDzJRyQyXzcq6yAPm5tMWHSN756CldfkxGF+/T49FXXE7O8iqEPj2n9kwaFKIsG 746y3z7dnnPaLhJ//ygbYcrZa1XEMwDAUPcYQRBOVrvXKUnYjXM5CEVHkvF+ic4D Q1ewojpLPBCQQlzEQYTMktSWbQDZC1d0coauQfqbMQVfGd7N+0TFUHqy0oNnWZcy BJDLoqJD2eretfE+aQ8e69i9wmwoEzamc6EdJNfoe29RKy8UrP5D2AyVSo4PnYJn 5qZp/KRmKvmCig== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukIYh7ymwC4h/IjBK45i l1uoWZWmwxXOlgeSr5Dk2/H2Aur7WNf6haMVNIzKzt/Lr/bdKx1BJzh2D/QhRXI+ ss3hmUXiVoBe/omHFBifjDbDTz2SKinfZahAP4+HUfIWT1NRTmhPIhBctcm4NkWU SJwpgSBN3skXWnA4bvCH54vag0fL9FCV4aQO9i6WEjqf9lZxbjJrZnLMqXZawalf m+WUOUCnpmc42G+AJyjJLNY+L/TQgo3BP2kQPxc1qqkBZPwpgt44makCUwpXk8EH 7jt+rB2XORsZ2lvjQqUb5ahnK7kT+Ktjs99x82mvBX0trnd1GHz1veXxm68f6yQ/ RQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 35275630269928093193130626782 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-21 19:17:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-01 16:35:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '59-AA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shoreview' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3680 Victoria St. N' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deluxe Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.checksbydeluxe.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23512917787871403146255820499634956880492049551627555848551447995178061869012764797506864548977140014958070248975740615103426975165859412989000921694899272822357419668078154237593978159453536975370735140284123420196132383991513992593441120529302967843870992882114746363546168203164125529705927772583554579091054235424242802182304423825804109022566001544354810811633145197410803901783083268974399504743367296584674239852223009788576510738296848246978030150722708953899422197304857303980830006626480981807501439794982977463773530397293710590620526718538683998554573058142765664074699195038650972249834927539673494732613 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checksbydeluxe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checksbydeluxe.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 703b2baa725958611d21caa64f7c427ac6b78b5b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 01e100770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000014ff156889b000004030048304602210086bfe6345e6f7cd370722471ca0523726e6dd3137d568bced5aebae94757e311022100cd816ca40be0208ff08204985138589bc85c2ef585b453af227eae024c40c9e3007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014ff1568e630000040300473045022100e658a14f18ce12180c615f94a2e3bbdcf96d4494bef1eb0c372773c054e311a00220187966b868783b6a90754ee80a03e71406375754f7a364a53dab0f5cc4fd2c0a007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000014ff156a1e90000040300473045022100bd5e93749efa348c09c7b40cdc7ee030f50539115381a718b6163fc9caa2ec7202202b0907ec51d0d43c74f8d436c13fddd5d73bbdae092ead6453aade8fe3328aae0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014ff156a908000004030047304502201334214f55f31b847f1a6a4ed223f92470f5533985f67d002e59b82260dcbfc8022100ea236d9daea9993211578c7e9db189709ca04b408f374626cb91384426d2ac81 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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