search.yves-rocher.at

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 1d:01:8e:cc:26:0b:8e:16:e4:91:78:71 was issued on by GlobalSign nv-sa.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
Organization unit: IT
State / Province: Morbihan
Locality: La Gacilly
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:01:8e:cc:26:0b:8e:16:e4:91:78:71
Serial Number (int): 8976948552556421175722473585
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 95:71:e3:32:0a:87:c6:4a:b1:4a:cf:1c:cd:e2:23:5c:f4:9b:22:7a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): ed:80:43:dc:3e:3a:2e:6f:1d:ea:87:c6:02:17:3b:7e:64:a3:93:1e
Fingerprint (sha256): e8:cf:e9:53:0f:29:c8:22:71:c8:d3:b3:ce:e9:7b:b9:e9:ab:2d:59:b7:de:19:05:65:08:5b:88:2e:da:9b:35

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate search.yves-rocher.at

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for search.yves-rocher.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

search.yves-rocher.at
search.yves-rocher.be
search.yves-rocher.ro
search.yves-rocher.nl
search.yves-rocher.dk
search.yves-rocher.es
search.yves-rocher.co.uk
search.yves-rocher.ru
search.yves-rocher-kz.com
search.yves-rocher.se
search.yves-rocher.ch
search.yves-rocher.de
search.yves-rocher.ua
search.yves-rocher.no
search.yvesrocher.ca
search.yves-rocher.fi
search.yves-rocher.fr

Other certificates including the domain name yves-rocher.at

(limited to 100 certificates)
www.yves-rocher.fr
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
t-www.yves-rocher.at
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.de
news.yves-rocher.at
news.yves-rocher.at
secureorder.yves-rocher.at
san-17-s50.tlsprovisioning.exacttarget.com
t-www.yves-rocher.at
secureorder.yves-rocher.at
t-www.yves-rocher.at
search.yves-rocher.at
san-17-s50.tlsprovisioning.exacttarget.com
news.yves-rocher.at
news.yves-rocher.at
www.yves-rocher.fr
nl.yves-rocher.at
news.yves-rocher.at
www.yves-rocher.fr
secureorder.m.yves-rocher.fr
search.yves-rocher.at
secureorder.m.yvesrocher.com.tr
san-17-s50.tlsprovisioning.exacttarget.com
san-17-s50.tlsprovisioning.exacttarget.com
secureorder.m.yves-rocher.fr
san-17-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
nl.yves-rocher.at
nl.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.de
www.yves-rocher.fr
san-17-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
secureorder.yves-rocher.at
www.yves-rocher.de
nocdn-w.yves-rocher.at
secureorder.yves-rocher.at
search.yves-rocher.at
news.yves-rocher.at
www.yves-rocher.fr
secureorder.yves-rocher.at
secureorder.yves-rocher.at
www.yves-rocher.fr
san-17-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.at
san-17-s50.tlsprovisioning.exacttarget.com
nl.yves-rocher.be
news.yves-rocher.at
www.yves-rocher.fr
news.yves-rocher.at
secureorder.yves-rocher.at
www.yves-rocher.fr
prod.yves-rocher.de
search.yves-rocher.at
nl.yves-rocher.be
www.yves-rocher.fr
www.yves-rocher.fr
secureorder.m.yvesrocher.com.tr
secureorder.yves-rocher.at
www.yves-rocher.fr
nl.yves-rocher.be

Certificate

The complete raw certificate details for search.yves-rocher.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo2woIwlfUGoiEP6FBQH
M6O5s/+aQZTm0ySw7Bpg3u94S6dj7DQN8Ro2vFXXQlSEuPjnZnqvvFm127KVJEQL
hrqiyPjst12pFQYcb5ifVMfOlgo0eNCmdkgQlu8NZkt+9lUP9cRI2ikj6oDr5ztw
Qy7cUdtpxE7Wnf1Npt4Ag3jrrdLmymii3KsmVEIBLiFkwm1vfOk8XWpv1OnQ0/Dv
6Q0Z0Es1u4S7i4eHLSu2fAQFP8PDFH17j+5/Km/XgIqbM4uJ/aeCKBocSk2BufR5
njckNLpgoXCiBBwBs6gPJBCeeEWf/R/2+4q39YhDYXRp7tOsfFF38h8rNStNitrf
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8976948552556421175722473585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-14 07:38:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 10:14:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Gacilly'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'search.yves-rocher.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25570007521457832168909348271025464898767051928718711700823417407350819604995463199454519125750066804500875893738236192260720099166340917963062831649551395425147956614517851736814510630305066956709729277700272527347846627514689796620719401261010609216072519934308256969414146431044864693229936736412686439946455388868409603580193729146562677797689999899817692065474472769573483052286387166866730274815666464804080597405970711171900850595337433460617835176393873155445095756878087555929760694455819774416072173735906321802761845281199087798846191430388936371997778266786079527812305497702976624585507965474652873744213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (401 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.yves-rocher.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9571e3320a87c64ab14acf1ccde2235cf49b227a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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