*.gfi.fr

- Gfi Informatique -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:31:0c:3b:12:4c:ec:30:6e:fb:92:59:8e:82:df:f3:fd was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gfi Informatique

Organization: Gfi Informatique
Organization unit: DSI
State / Province: Ile de France
Locality: Saint-Ouen
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:31:0c:3b:12:4c:ec:30:6e:fb:92:59:8e:82:df:f3:fd
Serial Number (int): 1492203374625783005519267507543262982304765
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: fc:d3:b7:ee:5a:bb:61:8b:b6:ac:8f:f7:d2:26:66:06:eb:af:22:9d
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 00:53:0d:52:09:fc:77:a4:f6:c8:38:33:8e:47:b0:10:86:99:13:78
Fingerprint (sha256): f4:4f:08:5f:ee:3b:82:9c:1e:7e:0d:0f:ce:fb:bb:9d:e8:18:f7:86:de:98:a8:02:f7:ac:33:14:b4:19:6f:e3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate *.gfi.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gfi.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gfi.fr
gfi.fr

Other certificates including the domain name gfi.fr

(limited to 100 certificates)
pegase.gfi.fr
pegase.gfi.fr
csaext.gfi.fr
pegase.gfi.fr
*.gfi.fr
pegase01.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase01.gfi.fr
www.remi-centrevaldeloire.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
assyst.gfi.fr
pegase.gfi.fr
csaext.gfi.fr
*.gfi.fr
dmwebws.gfi.fr
asp.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase01.gfi.fr
*.gfi.fr
gosap.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase.gfi.fr
*.gfi.fr
pegase01.gfi.fr
pegase01.gfi.fr
myauth.gfi.fr
pegase01.gfi.fr
assyst.gfi.fr
pegase.gfi.fr
chb.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
dmwebws.gfi.fr
gosap.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
csaext.gfi.fr
pegase.gfi.fr
gosap.gfi.fr
pegase.gfi.fr
git-dxp.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
myauth.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase01.gfi.fr
iskm.gfi.fr
pegase01.gfi.fr
pegase.gfi.fr
transfert-software.inetum.com
pegase01.gfi.fr
pegase.gfi.fr
*.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
transfert-software.inetum.com
*.gfi.fr
gosap.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr
pegase01.gfi.fr
*.gfi.fr
pegase01.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase.gfi.fr
pegase01.gfi.fr

Certificate

The complete raw certificate details for *.gfi.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISESExDDsSTOwwbvuSWY6C3/P9MA0GCSqGSIb3DQEBBQUA
MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD
VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw
HhcNMTIxMjA0MTU0MDEwWhcNMTUxMjA1MTU0MDEwWjB2MQswCQYDVQQGEwJGUjEW
MBQGA1UECAwNSWxlIGRlIEZyYW5jZTETMBEGA1UEBwwKU2FpbnQtT3VlbjEMMAoG
A1UECwwDRFNJMRkwFwYDVQQKDBBHZmkgSW5mb3JtYXRpcXVlMREwDwYDVQQDDAgq
LmdmaS5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTGrQr9aC8f
iZwT8ivbSLJOwYlxuEh8X1tuU92/kuGQcy7K8qQl2tHJxuHl8PDWLZ4AFnvwmVti
Cv31aJ5iQX2zETq26+OfahARcbWYezsul5CoHFwiLm5vpVZ8KNsX59+jid59/fPa
a6xzw9XOJO/N7fIWltXwy1DGx/tswejpYcbz5m06Tsv4Tu2magFlYUWE5BZVjufq
4D+TfViEUCtCUThpf9SxbAhqMx94t07oEfG1Avr3MmlVzXL2SrInqp5Cd5UzVAOw
scyTiRohEJDZtvKXWiFbkansjElJxXFij7cfQBU3TSxgmszkASLEwZUZj/HMMZRO
9HEFZn2E6EkCAwEAAaOCAckwggHFMA4GA1UdDwEB/wQEAwIFoDBMBgNVHSAERTBD
MEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz
aWduLmNvbS9yZXBvc2l0b3J5LzAbBgNVHREEFDASgggqLmdmaS5mcoIGZ2ZpLmZy
MAkGA1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEUGA1Ud
HwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3MvZ3Nvcmdh
bml6YXRpb252YWxnMi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMEcGCCsGAQUFBzAC
hjtodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc29yZ2FuaXph
dGlvbnZhbGcyLmNydDA7BggrBgEFBQcwAYYvaHR0cDovL29jc3AyLmdsb2JhbHNp
Z24uY29tL2dzb3JnYW5pemF0aW9udmFsZzIwHQYDVR0OBBYEFPzTt+5au2GLtqyP
99ImZgbrryKdMB8GA1UdIwQYMBaAFF1Gso3ES3Qcu+31c7Y6tziPdZ5+MA0GCSqG
SIb3DQEBBQUAA4IBAQAQ/zsahlV5Wx+ppxnpTzDaPE1Y1Z8G2tzieydABTiOge1T
/UbHnsH6KXwWMx+8MwTz7N8e6Km6VBZxYF5Zo87X9h2nRyBWy+HCPom7+NaCNitz
oyymTz7GT7oOODbDMg3LcFTyHYP3NXkBm8Er/SErDbX/qOFtUwgTK0D668zLfmFw
PrwsXp3LSh5oQK4Um8XkmkQO1i/M9ExHP4xGPKj577YFj05VK53nK4Yxbv52kdAG
07gyfHsgxWSwqXYpYHAoJqRly3I8X/87+hAp9Dn0Xj/9au3JsAqA+CBa/FDhSzVT
I/lg6hOpwDNG8KBUsiu7qaP2kwIP5lT7sc//caa0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMatCv1oLx+JnBPyK9tI
sk7BiXG4SHxfW25T3b+S4ZBzLsrypCXa0cnG4eXw8NYtngAWe/CZW2IK/fVonmJB
fbMROrbr459qEBFxtZh7Oy6XkKgcXCIubm+lVnwo2xfn36OJ3n3989prrHPD1c4k
783t8haW1fDLUMbH+2zB6OlhxvPmbTpOy/hO7aZqAWVhRYTkFlWO5+rgP5N9WIRQ
K0JROGl/1LFsCGozH3i3TugR8bUC+vcyaVXNcvZKsieqnkJ3lTNUA7CxzJOJGiEQ
kNm28pdaIVuRqeyMSUnFcWKPtx9AFTdNLGCazOQBIsTBlRmP8cwxlE70cQVmfYTo
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492203374625783005519267507543262982304765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-04 15:40:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-05 15:40:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint-Ouen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gfi Informatique'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gfi.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22820865655734211441875308672292614074508948369905419136235380826758016078665518721366576506076268444350896821604510400908714589499357890509186242293323231790903856139510225931128652769087993325109050135483845547437171387655580344533703900780401761254616559499774368613381303834147637643418705064984392414421593576021765038884039216356965701136284045266920147675943252965820653047630739905329231032805967709435481905457597973361355025599024191621222159220812637787490480615959209648639960205392802935582812015001185179202449186178619327360316675018371793041525307148425008615800705178235380422595179947566505992185929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfi.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcd3b7ee5abb618bb6ac8ff7d2266606ebaf229d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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