litigation.abreuadvogados.com

- Abreu & Associados - Sociedade de Advogados, SP, R.L. -

Issued by MULTICERT SSL Certification Authority 001

About this certificate

This digital certificate with serial number 7d:21:32:47:36:32:b8:0a was issued on by MULTICERT - Serviços de Certificação Electrónica S.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Abreu & Associados - Sociedade de Advogados, SP, R.L.

Organization: Abreu & Associados - Sociedade de Advogados, SP, R.L.
Organization unit: Certificado SSL/TLS
Locality: Lisboa
Country: PT

MULTICERT - Serviços de Certificação Electrónica S.A.

Organization: MULTICERT - Serviços de Certificação Electrónica S.A.
Organization unit: Certification Authority
Country: PT

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:21:32:47:36:32:b8:0a
Serial Number (int): 9016543210405804042
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: b3:87:d3:48:f2:4b:1a:f8:b3:fc:9a:39:80:f0:b5:ab:85:f5:ed:03
AuthorityKeyId: b0:02:39:52:0a:4f:73:9a:c8:d9:81:45:36:5d:11:9d:5f:23:39:97

Fingerprint (sha1): bd:da:3e:8a:09:15:54:39:89:cf:ab:7f:3a:71:3a:f9:a5:82:67:b6
Fingerprint (sha256): f3:f1:d7:e8:a4:70:1c:72:ea:56:11:7f:bd:f6:ee:f2:6c:3d:ab:1c:8d:77:56:4b:36:8b:37:06:16:d9:74:94

Issuing Certificate URL: http://pki.multicert.com/cert/SSL_CA01.cer

Revocation information

OCSP Server: http://ocsp.multicert.com/ocsp
CRL Distribution Point: http://pki.multicert.com/crl/crl_ssl001.crl

Check the revocation status for certificate litigation.abreuadvogados.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for litigation.abreuadvogados.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

litigation.abreuadvogados.com

Other certificates including the domain name abreuadvogados.com

(limited to 100 certificates)
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
webmail2010.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
webmail2010.abreuadvogados.com
remoto.abreuadvogados.com
abreuadvogados.com
marketing.abreuadvogados.com
marketing.abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
abreuadvogados.com
*.abreuadvogados.com
abreuadvogados.com
litigation.abreuadvogados.com
webmail2010.abreuadvogados.com
mkt.valorcar.pt

Certificate

The complete raw certificate details for litigation.abreuadvogados.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIITjCCBjagAwIBAgIIfSEyRzYyuAowDQYJKoZIhvcNAQELBQAwgacxCzAJBgNV
BAYTAlBUMUIwQAYDVQQKDDlNVUxUSUNFUlQgLSBTZXJ2acOnb3MgZGUgQ2VydGlm
aWNhw6fDo28gRWxlY3Ryw7NuaWNhIFMuQS4xIDAeBgNVBAsMF0NlcnRpZmljYXRp
b24gQXV0aG9yaXR5MTIwMAYDVQQDDClNVUxUSUNFUlQgU1NMIENlcnRpZmljYXRp
b24gQXV0aG9yaXR5IDAwMTAeFw0xODExMjIxODIwMzRaFw0yMDAzMDMyMzU5MDBa
MIGkMQswCQYDVQQGEwJQVDEPMA0GA1UEBwwGTGlzYm9hMT4wPAYDVQQKDDVBYnJl
dSAmIEFzc29jaWFkb3MgLSBTb2NpZWRhZGUgZGUgQWR2b2dhZG9zLCBTUCwgUi5M
LjEcMBoGA1UECwwTQ2VydGlmaWNhZG8gU1NML1RMUzEmMCQGA1UEAwwdbGl0aWdh
dGlvbi5hYnJldWFkdm9nYWRvcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCd54R+ZcrBtmBTtXbdNH1TkOooGqVDn40q6DdBbA2yDZjFkXjBRxHR
qExqEahf7eW16dTKkPB40cN4NnzLazoi42xFvXOzC1FEOy02tSj1wSOa69qsWvoM
CfdfSX4q1NJJd1IJoRJulaFoqP7Qco/MwqfKeTnM1bHJDjcBGW/jLufwbHLgMxBE
vZMZm6Sv0sLJ9/zj3PUEEWsaGVdCp7mKT2l0m6oR/UaLdYHSRMZ0qpaARl0Gikfo
ySfzWE/OXXDjbBZFLMcTTPcslaZstB7pvzuMAJEdac/+6RBuFLaWyaaJ9tgUkhq4
Tu9WFScJDMM1i49gIbFSB+dk7z04b9ntAgMBAAGjggN9MIIDeTAMBgNVHRMBAf8E
AjAAMB8GA1UdIwQYMBaAFLACOVIKT3OayNmBRTZdEZ1fIzmXMHIGCCsGAQUFBwEB
BGYwZDA2BggrBgEFBQcwAoYqaHR0cDovL3BraS5tdWx0aWNlcnQuY29tL2NlcnQv
U1NMX0NBMDEuY2VyMCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5tdWx0aWNlcnQu
Y29tL29jc3AwQgYDVR0uBDswOTA3oDWgM4YxaHR0cDovL3BraS5tdWx0aWNlcnQu
Y29tL2NybC9jcmxfc3NsMDAxX2RlbHRhLmNybDAoBgNVHREEITAfgh1saXRpZ2F0
aW9uLmFicmV1YWR2b2dhZG9zLmNvbTBWBgNVHSAETzBNMAgGBgQAj3oBBzA3Bg0r
BgEEAYHDbgEBAQAHMCYwJAYIKwYBBQUHAgEWGGh0dHA6Ly9wa2kubXVsdGljZXJ0
LmNvbTAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDwG
A1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9wa2kubXVsdGljZXJ0LmNvbS9jcmwvY3Js
X3NzbDAwMS5jcmwwHQYDVR0OBBYEFLOH00jySxr4s/yaOYDwtauF9e0DMA4GA1Ud
DwEB/wQEAwIEsDCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcAsh4FzIuizYog
Todm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFnPLBkygAABAMASDBGAiEA0cnFOJyn
/TjgjT6HW/uq7jWQnyRUO4Aeaj1+lvQlstYCIQCVshaC588sWym3am4m20v6cPuw
StvMZjBPCg37ttPKtwB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ
AAABZzywa7oAAAQDAEgwRgIhAOMvAXMg0FX5xLAx9epfMuSjf7TN+1aSKITSANw4
mF1pAiEAxaCEXtCLW8eN65iuJXQd2vdEQs1FS2wrtQ7gFftA+zMAdgBep3P531bA
57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAWc8sHH/AAAEAwBHMEUCIQCVVwJv
FeA9l2Juq653kRObAb+sFmxTno5XTAceFru5PQIgOoKGlGH8jeIe1zxTcS0+ivvF
w9fvqO5FtIGXg/qJa5cwDQYJKoZIhvcNAQELBQADggIBAGNr81SUv1QtPxFNWRCi
AhhD5OOQCqgzfJtVQR/YJoWUn2pWfFmKV5ajeqwMuC2w8C6Q52Nr5GXrHepyPHTJ
bUW3Ydp5WINHNGYgarQPhUg4wUmJjSAcgAY9EGk4adqoplFq+h2xisIZkG2B+CCi
x9+lDdyjDTe89mJ8FaxRNDtG5ebWRe1Azl1p83YRmAte4hCUamJwIkYGC6HWAnFw
kebgVdBKR5FAAZA+D1rIljXB8t7jnoV4YnfUNTL3s826AhOlEjbNYGKGZKHZvrho
bcj7FvO4tNu6St1KVA7oC23R+wRlTy0vYKrsKTzgOPXYiJ2UivMoKrZcj4BDHv9r
WWKcYFM55iL8zAwLcBAbXEsXzJ9ODn09WVlQ/f8EYBdcrJ9vcpGtcy1ZxXOCKPzS
/Jkzm1yJXeCTak3stlJhNulIOp9e2/LKVs4/AQp84Zl5EuG6g4p0UvE/XRMwOeMM
0joM2uSdlmqpfVF3IjRDmO1z3KMQuZCS9PuCAiJ+rTzwvDQSuMHYEpdxKJqBmqDK
WBXLgdapXdwxXGsYP/ZMYykHmht0VqmJ7OVgbAGXfrn/iYNwlxDvy1kjN42BDoYh
hPai8ED4pyANc2VV3J+uh5GmVea1Z7nYbnrOTX1B47a9LWYOKfN/EcFO0+QaI3q5
vzPEr6oJiVEP4fUcqBKE4Asb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneeEfmXKwbZgU7V23TR9
U5DqKBqlQ5+NKug3QWwNsg2YxZF4wUcR0ahMahGoX+3ltenUypDweNHDeDZ8y2s6
IuNsRb1zswtRRDstNrUo9cEjmuvarFr6DAn3X0l+KtTSSXdSCaESbpWhaKj+0HKP
zMKnynk5zNWxyQ43ARlv4y7n8Gxy4DMQRL2TGZukr9LCyff849z1BBFrGhlXQqe5
ik9pdJuqEf1Gi3WB0kTGdKqWgEZdBopH6Mkn81hPzl1w42wWRSzHE0z3LJWmbLQe
6b87jACRHWnP/ukQbhS2lsmmifbYFJIauE7vVhUnCQzDNYuPYCGxUgfnZO89OG/Z
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9016543210405804042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT - Serviços de Certificação Electrónica S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT SSL Certification Authority 001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 18:20:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lisboa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Abreu & Associados - Sociedade de Advogados, SP, R.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado SSL/TLS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'litigation.abreuadvogados.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19933579440396916564626183072204278652345701892385634857948566131117025220511994445560538016302863323716280755479286314709067144338128825377778589203727145739825307167219778390529985118241883489068801750731301369613753631956667067698700172498958206030047226663283888041478592868215862391213776430856101928364091482991092363808763914619163007004075515147834304171531052658256338794947329905318132651344995392439915646782922184058796356737528104547744074603854892791303148025385143952846793605381622484561116886862926313616083061044292864407765471466441540129935076260577119121030283637283617573127790679060004601846253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b00239520a4f739ac8d98145365d119d5f233997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/cert/SSL_CA01.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.multicert.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.46 (freshestCRL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001_delta.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litigation.abreuadvogados.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.0.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki.multicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b387d348f24b1af8b3fc9a3980f0b5ab85f5ed03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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