pep.shaparak.ir

- SHAPARAK -

Issued by KEYNECTIS Extended Validation CA

About this certificate

This digital certificate with serial number 11:21:02:39:ee:c2:ca:3b:76:46:cd:2c:99:af:71:fe:84:f5 was issued on by Certplus.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

SHAPARAK

Company registration number: 420013
Organization: SHAPARAK
Organization unit: IT DEPARTMENT
State / Province: TEHRAN
Locality: TEHRAN
Country: IR

Certplus

Organization: Certplus
Organization unit: Entity of KEYNECTIS for CA services
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:02:39:ee:c2:ca:3b:76:46:cd:2c:99:af:71:fe:84:f5
Serial Number (int): 1492141138207874005657835700224745344500981
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 84:8a:d6:e6:20:5d:1b:43:5d:81:6f:95:f2:1c:bb:6e:6d:5a:33:3f
AuthorityKeyId: 13:c1:32:2e:92:5c:ae:cd:6d:8f:a2:f3:e0:b4:49:b4:86:f4:a2:5c

Fingerprint (sha1): 63:e9:60:6b:93:9c:13:50:c5:5a:26:cc:f6:c1:ea:95:3e:6c:b4:6e
Fingerprint (sha256): f6:67:b0:a6:e2:94:c4:27:f3:41:9b:2d:ff:27:3f:c6:aa:ba:ff:89:30:cd:2f:3a:00:bd:84:7f:fd:4f:7f:a4


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/evssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl

Check the revocation status for certificate pep.shaparak.ir

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pep.shaparak.ir

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pep.shaparak.ir

Other certificates including the domain name shaparak.ir

(limited to 100 certificates)
hub.shaparak.ir
soha.shaparak.ir
ecd1.shaparak.ir
fcp.shaparak.ir
asan.shaparak.ir
fanava.shaparak.ir
kica.shaparak.ir
*.shaparak.ir
pec.shaparak.ir
bpm.shaparak.ir
sayan.shaparak.ir
mms.shaparak.ir
sepehr.shaparak.ir
bpm.shaparak.ir
pep.shaparak.ir
pep.shaparak.ir
pec.shaparak.ir
my.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
pna.shaparak.ir
asan.shaparak.ir
ikc.shaparak.ir
mms.shaparak.ir
bpm.shaparak.ir
www.shaparak.ir
bpm.shaparak.ir
hub.shaparak.ir
say.shaparak.ir
hub.shaparak.ir
sep.shaparak.ir
asan.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
shaparak.ir
pec.shaparak.ir
pec.shaparak.ir
pep.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
mail.shaparak.ir
mms.shaparak.ir
sep.shaparak.ir
ikc.shaparak.ir
sayan.shaparak.ir
pecco.shaparak.ir
say.shaparak.ir
sep.shaparak.ir
tsm.shaparak.ir
bpm.shaparak.ir
fcp.shaparak.ir
sepehr.shaparak.ir
omid.shaparak.ir
sayan.shaparak.ir
shaparak.ir
pna.shaparak.ir
bpm.shaparak.ir
sadad.shaparak.ir
pec.shaparak.ir
mms.shaparak.ir
360.shaparak.ir
bpm.shaparak.ir
sep2.shaparak.ir
fcp.shaparak.ir
mabna.shaparak.ir
ikc.shaparak.ir
ecd1.shaparak.ir
ecd1.shaparak.ir
mms.shaparak.ir
shaparak.ir
my.shaparak.ir
pec.shaparak.ir
pna.shaparak.ir
asanapp.shaparak.ir
ikc.shaparak.ir
bpm.shaparak.ir
fanava.shaparak.ir
sandbox.shaparak.ir
mail.shaparak.ir
sep.shaparak.ir
sadad.shaparak.ir
say.shaparak.ir
shaparak.ir
tsm.shaparak.ir
mail.shaparak.com
pep.shaparak.ir
pec.shaparak.ir
pecco.shaparak.ir
mabna.shaparak.ir
sep2.shaparak.ir
say.shaparak.ir
fcp.shaparak.ir
pep.shaparak.ir
sep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
my.shaparak.ir

Certificate

The complete raw certificate details for pep.shaparak.ir in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISESECOe7Cyjt2Rs0sma9x/oT1MA0GCSqGSIb3DQEBCwUA
MHkxCzAJBgNVBAYTAkZSMREwDwYDVQQKEwhDZXJ0cGx1czEsMCoGA1UECxMjRW50
aXR5IG9mIEtFWU5FQ1RJUyBmb3IgQ0Egc2VydmljZXMxKTAnBgNVBAMTIEtFWU5F
Q1RJUyBFeHRlbmRlZCBWYWxpZGF0aW9uIENBMB4XDTE3MDcyMDE1MTEwOFoXDTE5
MDYyMDE1MTEwOFowgbkxEzARBgsrBgEEAYI3PAIBAxMCSVIxHTAbBgNVBA8TFFBy
aXZhdGUgT3JnYW5pemF0aW9uMQ8wDQYDVQQFEwY0MjAwMTMxCzAJBgNVBAYTAklS
MQ8wDQYDVQQIDAZURUhSQU4xDzANBgNVBAcMBlRFSFJBTjEWMBQGA1UECxMNSVQg
REVQQVJUTUVOVDERMA8GA1UEChMIU0hBUEFSQUsxGDAWBgNVBAMTD3BlcC5zaGFw
YXJhay5pcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL7QExx1PHBI
bXu00QnLfYy+pyOJU12gsVRNW25oV7RPETQfoLgwnTUChmEERJ5Ug15zMimGSRPC
fq2C7I9SKaju4ZqTwoyJ8BOCEKBVPs4m60fzEphTByk2QFDNJJoZurdYt8q2upNG
5zTLIJdlqZWFyDF7Xx5ICR5ASUV8kWMpYxFAdIwT0DqSV9hvvqW3KnkW2NblHz4E
9/rvK84aNQknX9ZyyoJ4cwvqaUIR3mQEtS6VSH/JsjoMj8PesIf9+7LpS8FgUAOS
K1jzztniGh6m406wCQNPEa85sPyl9f/nLHsYs1zuvWvwMw5VhC86ENQprHDZIyPi
UhQwqch1aMECAwEAAaOCAXwwggF4MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAaBgNVHREEEzARgg9wZXAu
c2hhcGFyYWsuaXIwUQYDVR0fBEowSDBGoESgQoZAaHR0cDovL2NybC1zc2wuY2Vy
dGlmaWNhdDIuY29tL2tleW5lY3Rpcy9jbGFzczJrZXluZWN0aXNldmNhLmNybDBG
BggrBgEFBQcBAQQ6MDgwNgYIKwYBBQUHMAGGKmh0dHA6Ly9vY3NwLXNzbC5jZXJ0
aWZpY2F0Mi5jb20vZXZzc2wtb2NzcDBFBgNVHSAEPjA8MDoGDSsGAQQBga1aAgUC
AwEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5vcGVudHJ1c3QuY29tL1BDMB0G
A1UdDgQWBBSEitbmIF0bQ12Bb5XyHLtubVozPzAfBgNVHSMEGDAWgBQTwTIuklyu
zW2PovPgtEm0hvSiXDANBgkqhkiG9w0BAQsFAAOCAQEAlW6xDaR1eYSZMZvVv2FN
7Ggc7mOxI2ZK+A2g6qy8j+o2M6dJu3IFjwRCr4Yz2JgC2Iq136XcPRxvAQ9ab2l5
Yr8YJj9ZkJBEdkdSjSmXPjI2rUVvxEumP+8EkyY2pxLiseix5dsFQts0+tLaATit
Uicpc8CDNSj3CggO6crcnXeodq8LVh/kWhADXFfNISf+OoYZ39zgke4XNYbcqDsZ
U8z6xAnlNtV0DITzDZBbXlJXphumg5aiq5oV+0FRi8tOoYeKcNux6Z14YH4mJIuH
iNCSmgzOjtrn5iZW3DUECbC4llOwA8iS+p78nvtFZt/hPOkAkcX2By2DwsX4mafu
Tg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtATHHU8cEhte7TRCct9
jL6nI4lTXaCxVE1bbmhXtE8RNB+guDCdNQKGYQREnlSDXnMyKYZJE8J+rYLsj1Ip
qO7hmpPCjInwE4IQoFU+zibrR/MSmFMHKTZAUM0kmhm6t1i3yra6k0bnNMsgl2Wp
lYXIMXtfHkgJHkBJRXyRYyljEUB0jBPQOpJX2G++pbcqeRbY1uUfPgT3+u8rzho1
CSdf1nLKgnhzC+ppQhHeZAS1LpVIf8myOgyPw96wh/37sulLwWBQA5IrWPPO2eIa
HqbjTrAJA08Rrzmw/KX1/+csexizXO69a/AzDlWELzoQ1CmscNkjI+JSFDCpyHVo
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492141138207874005657835700224745344500981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certplus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entity of KEYNECTIS for CA services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS Extended Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 15:11:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 15:11:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '420013'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT DEPARTMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHAPARAK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pep.shaparak.ir'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24087883379094456757296034294010143979984308537939904340875407731397430107846084100332435426498186823311054600614697968819689368748590039446369448388628058957538791829041955632597179872609652140421687325866662447394629781168685826054626259314120496333698209945139778795656242197162156706024750989631798260362438117833142582826355296977035056315710348140451511442392633025271540065622800094678301847385817663269406185180457830588102624037638874148048280692909120484849997713803745109589306045401749578160609873211526239800029747922127888638917011690109846979590811518592912949004416401875601810758601286105938475182273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pep.shaparak.ir'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/evssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.3.1 (CertPlus EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							848ad6e6205d1b435d816f95f21cbb6e6d5a333f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 13c1322e925caecd6d8fa2f3e0b449b486f4a25c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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