sftp.prhc.on.ca

- Peterborough Regional Health Center -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:23:f0:59 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Peterborough Regional Health Center

Organization: Peterborough Regional Health Center
State / Province: Ontario
Locality: Peterborough
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:23:f0:59
Serial Number (int): 1277423705
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 34:3e:91:94:e7:78:67:25:63:4d:79:9f:18:f6:ba:85:85:26:91:99
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): bf:f5:cd:9e:cf:3e:a9:b9:a9:18:73:ce:2f:9c:e6:5c:28:68:bf:01
Fingerprint (sha256): ef:39:e5:f8:3a:94:2e:9f:9a:9e:9a:a0:0d:7a:77:70:18:99:b4:f5:39:43:38:1f:82:e7:44:e1:fc:9f:ff:f3

Issuing Certificate URL: http://aia.entrust.net/2048-l1csha2.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate sftp.prhc.on.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sftp.prhc.on.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sftp.prhc.on.ca

Other certificates including the domain name prhc.on.ca

(limited to 100 certificates)
cucmpub-ms.prhc.on.ca
exp-cmra01.prhc.on.ca
mail.prhc.on.ca
prhc.on.ca
sni.cloudflaressl.com
prhc.on.ca
viewecg.prhc.on.ca
CUCMPUB-ms.prhc.on.ca
exp-cmra02.prhc.on.ca
its-cpa01.prhc.on.ca
guest.prhc.on.ca
exp-emra.prhc.on.ca
viewecg.prhc.on.ca
viewPACS.prhc.on.ca
mail.prhc.on.ca
viewPACS.prhc.on.ca
prhc.on.ca
adfs.prhc.on.ca
viewecg.prhc.on.ca
askhr.prhc.on.ca
ITS-CPA01.prhc.on.ca
viewPACS.prhc.on.ca
*.prhc.on.ca
ITS-CPA01.prhc.on.ca
*.prhc.on.ca
*.prhc.on.ca
www.prhc.on.ca
ITS-CPA01.prhc.on.ca
CUCPUB-ms.prhc.on.ca
on0771isap999.prhc.on.ca
my.prhc.on.ca
imppub-ms.prhc.on.ca
*.prhc.on.ca
dia-densitas.prhc.on.ca
ITS-CPA01.prhc.on.ca
helpdesk.yokohamaia.com
exp-emra02.prhc.on.ca
mail.prhc.on.ca
cucpub-ms.prhc.on.ca
its-cpa01.prhc.on.ca
exp-emra.prhc.on.ca
*.prhc.on.ca
exp-cmra02.prhc.on.ca
mail.prhc.on.ca
viewPACS.prhc.on.ca
imppub-ms.prhc.on.ca
its-cpa01.prhc.on.ca
viewPACS.prhc.on.ca
exp-emra02.prhc.on.ca
my.prhc.on.ca
exp-emra01.prhc.on.ca
askhr.prhc.on.ca
exp-emra01.prhc.on.ca
esm.centralpafoodbank.org
*.prhc.on.ca
mail.prhc.on.ca
adfs.prhc.on.ca
ITS-CPA01.prhc.on.ca
my.prhc.on.ca
mail.prhc.on.ca
CUCMPUB-ms.prhc.on.ca
exp-cmra01.prhc.on.ca
ITS-CPA01.prhc.on.ca
remote.prhc.on.ca
prhc.on.ca
prhc.on.ca
viewPACS.prhc.on.ca
mytime.prhc.on.ca
esm.centralpafoodbank.org
prhc.on.ca
sftp.prhc.on.ca
*.prhc.on.ca
kwa-app01.prhc.on.ca
exp-cmra.prhc.on.ca
*.prhc.on.ca

Certificate

The complete raw certificate details for sftp.prhc.on.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIETCPwWTANBgkqhkiG9w0BAQsFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xNDA4MTkxOTU3NTBaFw0xODEwMTky
MjE2MjBaMH4xCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMRUwEwYDVQQH
EwxQZXRlcmJvcm91Z2gxLDAqBgNVBAoTI1BldGVyYm9yb3VnaCBSZWdpb25hbCBI
ZWFsdGggQ2VudGVyMRgwFgYDVQQDEw9zZnRwLnByaGMub24uY2EwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbbCla5QKGPF5WtnG0xSkpK+SKoZAZ/bg
hpfpHpZWzLQhxw/hHk/m3NVQ3b79BvpWzra1EU3tZ7Z0SSa1mdyiFvPEiUK0GWy/
zMtSw2mp46gdcvemfSMK9tOdRnXDNKe/JVeELU1ttiI2K0/dvS7RNCH3YXAnc2qZ
2Xt4nqqAvvERlkpi7H2Z0wYUQcuaWKK/7ScXfGFbOMBYJqwr5gtT1PNfoKnqEFsN
BofNOUmzCRgH3RfU6GDKC13xvjqlo51Ypv2yjfcBAcEckRiH4XZ/VjC/X3+7cp3u
7lasWTPtejCoHOtR6FHI/2n9l5Y+QLOdhBKM0cC+fCoqQyGd1L8tAgMBAAGjggF4
MIIBdDALBgNVHQ8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwMwYDVR0fBCww
KjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFjLmNybDBoBggr
BgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0
MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0LzIwNDgtbDFjc2hh
Mi5jZXIwSgYDVR0gBEMwQTA1BgkqhkiG9n0HSwIwKDAmBggrBgEFBQcCARYaaHR0
cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMBoGA1UdEQQTMBGCD3Nm
dHAucHJoYy5vbi5jYTAfBgNVHSMEGDAWgBQe8auJBvhJDwEzd+4Ueu4ZfJMoTTAd
BgNVHQ4EFgQUND6RlOd4ZyVjTXmfGPa6hYUmkZkwCQYDVR0TBAIwADANBgkqhkiG
9w0BAQsFAAOCAQEAKxwX0xvZTuJ8scOAfgxE5ApLsILnDh85QA3IDMxLPD8XJKcM
5+uU3qPYtFKULwGLznnI4QhAkGZLvILM9fze/HMn8wX3dm+vIS8NtZzdwhJigi8T
t3NzuViUMdn470nT6pt5wXwM3tqosRj0QioVtmK3uSGAC1en/CXhsPcmWTRswz1Z
fSyI1115qSjMXIQcfBcMlf1eww1QisfDe19xVgBq5fZAM6yrai6J/2JMXC7kFo47
IP2LYxhbpeg7JCSBXfRrYQjcJjGZT9PP9nXZSWKv2QMrVk+sq449PrTfew2h49Qi
1ZLP7RYBrYAp+dCJTZ9IQ7OjcuS6V8VGfH9uSg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG2wpWuUChjxeVrZxtMU
pKSvkiqGQGf24IaX6R6WVsy0IccP4R5P5tzVUN2+/Qb6Vs62tRFN7We2dEkmtZnc
ohbzxIlCtBlsv8zLUsNpqeOoHXL3pn0jCvbTnUZ1wzSnvyVXhC1NbbYiNitP3b0u
0TQh92FwJ3Nqmdl7eJ6qgL7xEZZKYux9mdMGFEHLmliiv+0nF3xhWzjAWCasK+YL
U9TzX6Cp6hBbDQaHzTlJswkYB90X1Ohgygtd8b46paOdWKb9so33AQHBHJEYh+F2
f1Ywv19/u3Kd7u5WrFkz7XowqBzrUehRyP9p/ZeWPkCznYQSjNHAvnwqKkMhndS/
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277423705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-19 19:57:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 22:16:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Peterborough'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Peterborough Regional Health Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sftp.prhc.on.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22272031840884249076730915151404280017143774043053956037942682525886693873750359992482597960679559498676850047263790701912493003579748681968258251484757145194384576304139331128779976380095381169118924396301423121565227470185077997969373194673616093102690962529737210195671201076444208713581635782031914455947478093074639471874830387415306249138836832783552233413589889208035399380871222868077230960683695686406241356464119175517246154147549390109331166374230837521142914215464070025784504952443099823113749532998022178840608736962586322697549373674529231950520972026894645694566191530074064975911811560738004086865709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1csha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sftp.prhc.on.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							343e9194e7786725634d799f18f6ba8585269199
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b1c17d31bd94ee27cb1c3807e0c44e40a4bb082e70e1f39400dc80ccc4b3c3f1724a70ce7eb94dea3d8b452942f018bce79c8e1084090664bbc82ccf5fcdefc7327f305f7766faf212f0db59cddc21262822f13b77373b9589431d9f8ef49d3ea9b79c17c0cdedaa8b118f4422a15b662b7b921800b57a7fc25e1b0f72659346cc33d597d2c88d75d79a928cc5c841c7c170c95fd5ec30d508ac7c37b5f7156006ae5f64033acab6a2e89ff624c5c2ee4168e3b20fd8b63185ba5e83b2424815df46b6108dc2631994fd3cff675d94962afd9032b564facab8e3d3eb4df7b0da1e3d422d592cfed1601ad8029f9d0894d9f4843b3a372e4ba57c5467c7f6e4a