cXM ÅbWLAƒh hdmemoryb”*hdownergd nonode@nohosthdnamed asn1_OTP-PKIXhdsizebåhdnoded nonode@nohosthd named_tabledtruehdtypedsethdkeyposahd protectiond protecteddbWLAƒhdpkcs-1hdvaluedefdtrueadpkcs-1hdtypejdOBJECT IDENTIFIERjjdnohaabHb»aahbWLAƒhd ansi-X9-62hdvaluedefdtruea{d ansi-X9-62hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=²bWLAƒhdNumericUserIdentifierhdtypedefdtruebrdNumericUserIdentifierhdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstrainthaa jjdno®bWLAƒhdTerminalIdentifierhdtypedefdtruebgdTerminalIdentifierhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnoŠbWLAƒhdUniqueIdentifierhdtypedefdtruebdUniqueIdentifierhdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdno'bWLAƒhdCRLDistributionPointshdtypedefdtrueaÉdCRLDistributionPointshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaÉdOTP-PKIXdDistributionPointjjdnolhdSizeConstrainthadMAXjjdnoxbWLAƒhdid-ce-nameConstraintshdvaluedefdtruea¬did-ce-nameConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaabWLAƒhdOtherPrimeInfoshdtypedefdtruea&dOtherPrimeInfoshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea&dOTP-PKIXdOtherPrimeInfojjdnolhdSizeConstrainthadMAXjjdnoçbWLAƒhd*ExtensionPhysicalDeliveryAddressComponentshdtypedefdtruebëd*ExtensionPhysicalDeliveryAddressComponentshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebëdOTP-PKIXd PDSParameterjjdnojbWLAƒhd id-qt-cpshdvaluedefdtruea,d id-qt-cpshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaaobWLAƒhdcRLDistributionPointshdtypedefdtruebŒdcRLDistributionPointshdObjecthdExternaltypereferencebŒdOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaÇdid-ce-cRLDistributionPointshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebŽdOTP-PKIXdCRLDistributionPointsjybWLAƒhdSupportedFieldIdshdtypedefdtrueb†dSupportedFieldIdshd ObjectSethdExternaltypereferenceb†dOTP-PKIXdFIELD-ID-CLASSdtruedidlhhdOTP-PKIXdfield-characteristic-twohaabHb'=aalhdidhdvaluedefdtrueaždcharacteristic-two-fieldhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdExternaltypereferencebŸdOTP-PKIXdCharacteristic-twojhhdOTP-PKIXdfield-prime-fieldhaabHb'=aalhdidhdvaluedefdtruea—d prime-fieldhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdExternaltypereferenceb‹dOTP-PKIXdPrime-pjjÖbWLAƒhdPUBLIC-KEY-ALGORITHM-CLASShdclassdefdtruebdPUBLIC-KEY-ALGORITHM-CLASShd objectclasslhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnodUNIQUEd MANDATORYhd typefielddTypedOPTIONALhd typefieldd PublicKeyTypedOPTIONALjhd WITH SYNTAXldIDhdvaluefieldreferencedidldTYPEhdtypefieldreferencedTypejldPUBLIC-KEY-TYPEhdtypefieldreferenced PublicKeyTypejjbWLAƒhdIssuingDistributionPointhdtypedefdtruebdIssuingDistributionPointhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebddistributionPointhdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferencebdOTP-PKIXdDistributionPointNamejjdnodOPTIONALlhdCONTEXTajhd ComponentTypebdonlyContainsUserCertshdtypelhdtagdCONTEXTadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhdCONTEXTajhd ComponentTypeb donlyContainsCACertshdtypelhdtagdCONTEXTadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhdCONTEXTajhd ComponentTypeb!donlySomeReasonshdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGl hdunusedahd keyCompromiseahd cACompromiseahdaffiliationChangedahd supersededahdcessationOfOperationahdcertificateHoldahdprivilegeWithdrawnahd aACompromiseajjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeb"d indirectCRLhdtypelhdtagdCONTEXTadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhdCONTEXTajhd ComponentTypeb#donlyContainsAttributeCertshdtypelhdtagdCONTEXTadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhdCONTEXTajjjjdnoIbWLAƒhdDistributionPointhdtypedefdtrueaËdDistributionPointhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaÌddistributionPointhdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferenceaÌdOTP-PKIXdDistributionPointNamejjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaÍdreasonshdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGl hdunusedahd keyCompromiseahd cACompromiseahdaffiliationChangedahd supersededahdcessationOfOperationahdcertificateHoldahdprivilegeWithdrawnahd aACompromiseajjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaÎd cRLIssuerhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaÎdOTP-PKIXd GeneralNamesjjdnodOPTIONALlhdCONTEXTajjjjdno³bWLAƒhdPrivateKeyUsagePeriodhdtypedefdtruea@dPrivateKeyUsagePeriodhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaAd notBeforehdtypelhdtagdCONTEXTadIMPLICITajdGeneralizedTimejjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaBdnotAfterhdtypelhdtagdCONTEXTadIMPLICITajdGeneralizedTimejjdnodOPTIONALlhdCONTEXTajjjjdno~bWLAƒhdissuingDistributionPointhdtypedefdtrueb¨dissuingDistributionPointhdObjecthdExternaltypereferenceb¨dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebdid-ce-issuingDistributionPointhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebªdOTP-PKIXdIssuingDistributionPointjobWLAƒhdprivateKeyUsagePeriodhdtypedefdtruebhdprivateKeyUsagePeriodhdObjecthdExternaltypereferencebhdOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea>did-ce-privateKeyUsagePeriodhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebjdOTP-PKIXdPrivateKeyUsagePeriodj&bWLAƒhdMODULEh dmoduled undefineddOTP-PKIXd undefineddEXPLICIThdexportsdallhdimportsjdemptyhlÁdCurvedECPVerd ECParametersdEcpkParametersdECPointd FieldElementd Pentanomiald TrinomialdCharacteristic-twodPrime-pdECDSA-Sig-ValuedFieldIDd KEA-Parms-IddValidationParmsdDomainParametersd DHPublicKeyd RSAPublicKeyd Dss-Sig-Valued Dss-Parmsd DSAPublicKeyd ProxyInfod ACClearAttrsdAttrSpecd AAControlsdSecurityCategoryd ClassListd Clearanced RoleSyntaxd SvceAuthInfodIetfAttrSyntaxd TargetCertdTargetdTargetsdAttCertValidityPeriodd IssuerSerialdV2Formd AttCertIssuerdObjectDigestInfodHolderdAttCertVersiondAttributeCertificateInfodAttributeCertificatedInvalidityDatedHoldInstructionCodedCertificateIssuerd CRLReasond BaseCRLNumberdIssuingDistributionPointd CRLNumberdSubjectInfoAccessSyntaxdAccessDescriptiondAuthorityInfoAccessSyntaxd FreshestCRLdInhibitAnyPolicyd KeyPurposeIddExtKeyUsageSyntaxd ReasonFlagsdDistributionPointNamedDistributionPointdCRLDistributionPointsd SkipCertsdPolicyConstraintsd BaseDistancedGeneralSubtreedGeneralSubtreesdNameConstraintsdBasicConstraintsdSubjectDirectoryAttributesd IssuerAltNamed EDIPartyNamed AnotherNamed GeneralNamed GeneralNamesdSubjectAltNamedPolicyMappingsd DisplayTextdNoticeReferenced UserNoticedCPSuridPolicyQualifierIddPolicyQualifierInfod CertPolicyIddPolicyInformationdCertificatePoliciesdPrivateKeyUsagePerioddKeyUsagedSubjectKeyIdentifierd KeyIdentifierdAuthorityKeyIdentifierdDigestAlgorithmIdentifierd DigestInfodOtherPrimeInfodOtherPrimeInfosd VersionPKCS-1d RSAPrivateKeydTeletexDomainDefinedAttributedTeletexDomainDefinedAttributesd TerminalTypedPresentationAddressdExtendedNetworkAddressd PDSParameterdLocalPostalAttributesdUniquePostalNamedPosteRestanteAddressdPostOfficeBoxAddressd StreetAddressdUnformattedPostalAddressd*ExtensionPhysicalDeliveryAddressComponentsd PhysicalDeliveryOrganizationNamedPhysicalDeliveryPersonalNamedExtensionORAddressComponentsdPhysicalDeliveryOfficeNumberdPhysicalDeliveryOfficeNamed PostalCodedPhysicalDeliveryCountryNamedPDSNamedTeletexOrganizationalUnitNamedTeletexOrganizationalUnitNamesdTeletexPersonalNamedTeletexOrganizationNamedTeletexCommonNamed CommonNamedExtensionAttributedExtensionAttributesdBuiltInDomainDefinedAttributedBuiltInDomainDefinedAttributesdOrganizationalUnitNamedOrganizationalUnitNamesd PersonalNamedNumericUserIdentifierdOrganizationNamedPrivateDomainNamedTerminalIdentifierd X121AddressdNetworkAddressdAdministrationDomainNamed CountryNamedBuiltInStandardAttributesd ORAddressdAlgorithmIdentifierd TBSCertListdCertificateListd Extensiond ExtensionsdSubjectPublicKeyInfodUniqueIdentifierdTimedValiditydCertificateSerialNumberdVersionPKIX1Explicit88dTBSCertificated CertificatedDirectoryStringdRelativeDistinguishedNamedDistinguishedNamed RDNSequencedNamed EmailAddressdDomainComponentd X520PseudonymdX520SerialNumberdX520countryNamedX520dnQualifierd X520TitledX520OrganizationalUnitNamedX520OrganizationNamedX520StateOrProvinceNamedX520LocalityNamedX520CommonNamedX520namedAttributeTypeAndValuedAttributeValued AttributeTyped Attributed Extension-AnydAnydBooleandObjIdd SSLExtensiond SSLExtensionsdSSLExtensionAttributedSSLExtensionAttributesdSSLCharacteristic-twod SSLFieldIDd KEA-PublicKeydPublicKeyAlgorithmdSignatureAlgorithm-AnydSignatureAlgorithmdSSLSubjectPublicKeyInfo-AnydSSLSubjectPublicKeyInfodSSLAttributeTypeAndValuedSSLTBSCertificatedSSLCertificatejlÂd prime256v1d prime239v3d prime239v2d prime239v1d prime192v3d prime192v2d prime192v1d primeCurved c2tnb431r1d c2pnb368w1d c2tnb359v1d c2pnb304w1d c2pnb272w1d c2onb239v5d c2onb239v4d c2tnb239v3d c2tnb239v2d c2tnb239v1d c2pnb208w1d c2onb191v5d c2onb191v4d c2tnb191v3d c2tnb191v2d c2tnb191v1d c2pnb176w1d c2pnb163v3d c2pnb163v2d c2pnb163v1d c-TwoCurved ellipticCurvedid-ecPublicKeydid-publicKeyTypedppBasisdtpBasisdgnBasisdid-characteristic-two-basisdcharacteristic-two-fieldd prime-fieldd id-fieldTypedecdsa-with-SHA1d id-ecSigTyped ansi-X9-62did-keyExchangeAlgorithmddhpublicnumberdsha1WithRSAEncryptiondmd5WithRSAEncryptiondmd2WithRSAEncryptiond rsaEncryptiondid-dsa-with-sha1did-dsadid-sha1dmd5dmd2did-at-clearanced id-at-roledid-aca-encAttrsd id-aca-groupdid-aca-chargingIdentitydid-aca-accessIdentitydid-aca-authenticationInfodid-acadid-ce-targetInformationdid-pe-ac-proxyingdid-pe-aaControlsdid-pe-ac-auditIdentitydid-ce-invalidityDatedid-holdinstruction-rejectdid-holdinstruction-callissuerdid-holdinstruction-nonedholdInstructiondid-ce-holdInstructionCodedid-ce-certificateIssuerdid-ce-cRLReasonsdid-ce-deltaCRLIndicatordid-ce-issuingDistributionPointdid-ce-cRLNumberdid-pe-subjectInfoAccessdid-pe-authorityInfoAccessdid-ce-freshestCRLdid-ce-inhibitAnyPolicydid-kp-OCSPSigningdid-kp-timeStampingdid-kp-emailProtectiondid-kp-codeSigningdid-kp-clientAuthdid-kp-serverAuthdanyExtendedKeyUsagedid-ce-extKeyUsagedid-ce-cRLDistributionPointsdid-ce-policyConstraintsdid-ce-nameConstraintsdid-ce-basicConstraintsd id-ce-subjectDirectoryAttributesdid-ce-issuerAltNamedid-ce-subjectAltNamedid-ce-policyMappingsd anyPolicydid-ce-certificatePoliciesdid-ce-privateKeyUsagePerioddid-ce-keyUsagedid-ce-subjectKeyIdentifierdid-ce-authorityKeyIdentifierdid-cedpkcs-1dub-x121-address-lengthdub-unformatted-address-lengthdub-terminal-id-lengthdub-surname-lengthd ub-pseudonymdub-postal-code-lengthdub-pds-physical-address-linesdub-pds-parameter-lengthdub-pds-name-lengthdub-organizational-unitsd"ub-organizational-unit-name-lengthdub-organization-name-lengthdub-numeric-user-id-lengthdub-integer-optionsdub-initials-lengthdub-given-name-lengthdub-generation-qualifier-lengthdub-e163-4-sub-address-lengthdub-e163-4-number-lengthdub-extension-attributesdub-domain-name-lengthd(ub-domain-defined-attribute-value-lengthd'ub-domain-defined-attribute-type-lengthdub-domain-defined-attributesdub-country-name-numeric-lengthdub-country-name-alpha-lengthdub-common-name-lengthdub-emailaddress-lengthdub-matchdub-serial-numberdub-titledub-organizational-unit-namedub-organization-named ub-state-namedub-locality-namedub-common-namedub-named!teletex-domain-defined-attributesd terminal-typedextended-network-addressdlocal-postal-attributesdunique-postal-namedposte-restante-addressdpost-office-box-addressdstreet-addressdunformatted-postal-addressd.extension-physical-delivery-address-componentsd#physical-delivery-organization-namedphysical-delivery-personal-namedextension-OR-address-componentsdphysical-delivery-office-numberdphysical-delivery-office-named postal-codedphysical-delivery-country-namedpds-named!teletex-organizational-unit-namesdteletex-personal-namedteletex-organization-namedteletex-common-named common-namedid-emailAddressdpkcs-9did-domainComponentdid-at-pseudonymdid-at-serialNumberdid-at-countryNamedid-at-dnQualifierd id-at-titledid-at-organizationalUnitNamedid-at-organizationNamedid-at-stateOrProvinceNamedid-at-localityNamedid-at-commonNamedid-at-generationQualifierdid-at-initialsdid-at-givenNamed id-at-surnamed id-at-namedid-atdid-ad-caRepositorydid-ad-timeStampingdid-ad-caIssuersd id-ad-ocspd id-qt-unoticed id-qt-cpsdid-addid-kpdid-qtdid-pedid-pkixjjldEXTENSION-CLASSdEXTENSION-ATTRIBUTE-CLASSdCHARACTERISTIC-TWO-CLASSdFIELD-ID-CLASSdPUBLIC-KEY-ALGORITHM-CLASSdSIGNATURE-ALGORITHM-CLASSdATTRIBUTE-TYPE-AND-VALUE-CLASSjlNdinvalidityDatedholdInstructionCodedcertificateIssuerd cRLReasonsddeltaCRLIndicatordissuingDistributionPointd cRLNumberdsubjectInfoAccessdauthorityInfoAccessd freshestCRLdinhibitAnyPolicyd extKeyUsagedcRLDistributionPointsdpolicyConstraintsdnameConstraintsdbasicConstraintsdsubjectDirectoryAttributesd issuerAltNamedsubjectAltNamedpolicyMappingsdcertificatePoliciesdprivateKeyUsagePerioddkeyUsagedsubjectKeyIdentifierdauthorityKeyIdentifierd&x400-teletex-domain-defined-attributesdx400-terminal-typedx400-extended-network-addressdx400-local-postal-attributesdx400-unique-postal-namedx400-poste-restante-addressdx400-post-office-box-addressdx400-street-addressdx400-unformatted-postal-addressd3x400-extension-physical-delivery-address-componentsd(x400-physical-delivery-organization-named$x400-physical-delivery-personal-named$x400-extension-OR-address-componentsd$x400-physical-delivery-office-numberd"x400-physical-delivery-office-namedx400-postal-coded#x400-physical-delivery-country-named x400-pds-namedx400-teletex-personal-namedx400-teletex-common-namedx400-common-named ec-public-keydpp-basisdtp-basisdgn-basisdfield-characteristic-twodfield-prime-fielddecdsa-with-sha1dkeaddhdrsa-encryptiondsha1-with-rsa-encryptiondmd5-with-rsa-encryptiondmd2-with-rsa-encryptiond dsa-with-sha1ddsad emailAddressddomainComponentd pseudonymd serialNumberd countryNamed dnQualifierdtitledorganizationalUnitNamedorganizationNamedstateOrProvinceNamed localityNamed commonNamedgenerationQualifierdinitialsd givenNamedsurnamednamejldSupportedExtensionsdSupportedExtensionAttributesdSupportedCharacteristicTwosdSupportedFieldIdsdSupportedPublicKeyAlgorithmsdSupportedSignatureAlgorithmsdSupportedAttributeTypeAndValuesjpbWLAƒhd ellipticCurvehdvaluedefdtrueaîd ellipticCurvehdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aŽbWLAƒhd Dss-Sig-Valuehdtypedefdtruea4d Dss-Sig-Valuehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea5drhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea6dshdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajjjjdnoƒbWLAƒhdid-ce-holdInstructionCodehdvaluedefdtruebAdid-ce-holdInstructionCodehdtypejdOBJECT IDENTIFIERjjdnohaaaavbWLAƒhdanyExtendedKeyUsagehdvaluedefdtrueaêdanyExtendedKeyUsagehdtypejdOBJECT IDENTIFIERjjdnohaaaa%a§bWLAƒhd IssuerAltNamehdtypedefdtrueaœd IssuerAltNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaœdOTP-PKIXd GeneralNamesjjdnogbWLAƒhdub-organization-namehdvaluedefdtruebAdub-organization-namehdtypejdINTEGERjjdnoa@¹bWLAƒhd PostalCodehdtypedefdtruebÑd PostalCodehdtypejhdCHOICElhd ComponentTypebÒd numeric-codehdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstrainthaajjdnod mandatorylhd UNIVERSALajhd ComponentTypebÓdprintable-codehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnod mandatorylhd UNIVERSALajjjjdnoUbWLAƒhd postal-codehdvaluedefdtruebÏd postal-codehdtypejdINTEGERjjdnoa qbWLAƒhdteletex-organization-namehdvaluedefdtrueb©dteletex-organization-namehdtypejdINTEGERjjdnoa”bWLAƒhd Certificatehdtypedefdtrueaïd Certificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaðdtbsCertificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaðdOTP-PKIXdTBSCertificatejjdnod mandatorylhd UNIVERSALajhd ComponentTypeañdsignatureAlgorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceañdOTP-PKIXdAlgorithmIdentifierjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaòd signaturehdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnod mandatorylhd UNIVERSALajjjjdnoùbWLAƒhd RDNSequencehdtypedefdtrueaÝd RDNSequencehdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaÝdOTP-PKIXdRelativeDistinguishedNamejjdnojjdnoŒbWLAƒhd id-at-namehdvaluedefdtrueaRd id-at-namehdtypejhdExternaltypereferenceaRdPKIX1Explicit88d AttributeTypejjdnohaaaa)bWLAƒhd localityNamehdtypedefdtruea¾d localityNamehdObjecthdExternaltypereferencea¾dOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruealdid-at-localityNamehdtypejhdExternaltypereferencealdPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaÀdOTP-PKIXdX520LocalityNamejžbWLAƒhdCHARACTER STRINGhdtypedefdfalsed undefineddCHARACTER STRINGhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTyped undefineddidentificationhdtypejhdCHOICElhd ComponentTyped undefineddsyntaxeshdtypejhdSEQUENCEdfalsedfalselhd ComponentTyped undefineddabstracthdtypejdOBJECT IDENTIFIERjjdnod mandatoryd undefinedhd ComponentTyped undefineddtransferhdtypejdOBJECT IDENTIFIERjjdnod mandatoryd undefinedjjjdnod mandatoryd undefinedhd ComponentTyped undefineddsyntaxhdtypejdOBJECT IDENTIFIERjjdnod mandatoryd undefinedhd ComponentTyped undefineddpresentation-context-idhdtypejdINTEGERjjdnod mandatoryd undefinedhd ComponentTyped undefineddcontext-negotiationhdtypejhdSEQUENCEdfalsedfalselhd ComponentTyped undefineddpresentation-context-idhdtypejdINTEGERjjdnod mandatoryd undefinedhd ComponentTyped undefineddtransfer-syntaxhdtypejdOBJECT IDENTIFIERjjdnod mandatoryd undefinedjjjdnod mandatoryd undefinedhd ComponentTyped undefineddtransfer-syntaxhdtypejdOBJECT IDENTIFIERjjdnod mandatoryd undefinedhd ComponentTyped undefineddfixedhdtypejdNULLjjdnod mandatoryd undefinedjjjdnod mandatoryd undefinedhd ComponentTyped undefinedd string-valuehdtypejd OCTET STRINGjjdnod mandatoryd undefinedjjjdno5bWLAƒhdAuthorityInfoAccessSyntaxhdtypedefdtruebdAuthorityInfoAccessSyntaxhdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXdAccessDescriptionjjdnolhdSizeConstrainthadMAXjjdnodbWLAƒhdpkcs-9hdvaluedefdtrueaÑdpkcs-9hdtypejdOBJECT IDENTIFIERjjdnohaabHb»aa öbWLAƒhdCharacteristic-twohdtypedefdtruea dCharacteristic-twohdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea¡dmhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea¢dbasishdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea£d parametershdtypejdASN1_OPEN_TYPEjjdnod mandatoryjjjjdnoobWLAƒhdPrime-phdtypedefdtruea™dPrime-phdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdno¸bWLAƒhd VersionPKCS-1hdtypedefdtruea!d VersionPKCS-1hdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhd two-primeahdmultiajlhdconstrained_byjjjdno¬bWLAƒhd AttCertIssuerhdtypedefdtruea[d AttCertIssuerhdtypejhdCHOICElhd ComponentTypea\dv1Formhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea\dOTP-PKIXd GeneralNamesjjdnod mandatorylhd UNIVERSALajhd ComponentTypea^dv2FormhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea^dOTP-PKIXdV2Formjjdnod mandatorylhdCONTEXTajjjjdnobWLAƒhdid-ce-deltaCRLIndicatorhdvaluedefdtrueb%did-ce-deltaCRLIndicatorhdtypejdOBJECT IDENTIFIERjjdnohaaaabWLAƒhd ECParametershdtypedefdtrueaÙd ECParametershdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaÚdversionhdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhdecpVer1ajjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÛdfieldIDhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaÛdOTP-PKIXdFieldIDjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÜdcurvehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaÜdOTP-PKIXdCurvejjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÝdbasehdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÞdorderhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaßdcofactorhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnodOPTIONALlhd UNIVERSALajjjjdno‰bWLAƒhdid-pe-subjectInfoAccesshdvaluedefdtruebdid-pe-subjectInfoAccesshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa obWLAƒhdextended-network-addresshdvaluedefdtruebdextended-network-addresshdtypejdINTEGERjjdnoabWLAƒhdOrganizationalUnitNameshdtypedefdtruebdOrganizationalUnitNameshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa jjdnolhdSizeConstrainthaajjdno¤bWLAƒhdNetworkAddresshdtypedefdtruebcdNetworkAddresshdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstrainthaajjdnoLbWLAƒhdBuiltInStandardAttributeshdtypedefdtruebHdBuiltInStandardAttributeshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalsel hd ComponentTypebId country-namehdtypelhdtagd APPLICATIONadEXPLICITa jhdExternaltypereferencebIdOTP-PKIXd CountryNamejjdnodOPTIONALlhd APPLICATIONajhd ComponentTypebJdadministration-domain-namehdtypelhdtagd APPLICATIONadEXPLICITa jhdExternaltypereferencebJdOTP-PKIXdAdministrationDomainNamejjdnodOPTIONALlhd APPLICATIONajhd ComponentTypebKdnetwork-addresshdtypelhdtagdCONTEXTadIMPLICITajd NumericStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajhd ComponentTypebMdterminal-identifierhdtypelhdtagdCONTEXTadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajhd ComponentTypebNdprivate-domain-namehdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferencebNdOTP-PKIXdPrivateDomainNamejjdnodOPTIONALlhdCONTEXTajhd ComponentTypebOdorganization-namehdtypelhdtagdCONTEXTadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdnodOPTIONALlhdCONTEXTajhd ComponentTypebQdnumeric-user-identifierhdtypelhdtagdCONTEXTadIMPLICITajd NumericStringlhdSizeConstrainthaa jjdnodOPTIONALlhdCONTEXTajhd ComponentTypebSd personal-namehdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencebSdOTP-PKIXd PersonalNamejjdnodOPTIONALlhdCONTEXTajhd ComponentTypebUdorganizational-unit-nameshdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencebUdOTP-PKIXdOrganizationalUnitNamesjjdnodOPTIONALlhdCONTEXTajjjjdnogbWLAƒhdcertificatePolicieshdtypedefdtruebldcertificatePolicieshdObjecthdExternaltypereferencebldOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaGdid-ce-certificatePolicieshdtypejdOBJECT IDENTIFIERjjdnohaaaa hdTypehdExternaltypereferencebndOTP-PKIXdCertificatePoliciesj¢bWLAƒhdSupportedExtensionAttributeshdtypedefdtruebÉdSupportedExtensionAttributeshd ObjectSethdExternaltypereferencebÉdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruedidlhhdOTP-PKIXdx400-common-namealhdidhdvaluedefdtrueb¡d common-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebädOTP-PKIXd CommonNamejhhdOTP-PKIXdx400-teletex-common-namealhdidhdvaluedefdtrueb¥dteletex-common-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebèdOTP-PKIXdTeletexCommonNamejhhdOTP-PKIXdx400-teletex-personal-namealhdidhdvaluedefdtrueb®dteletex-personal-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebìdOTP-PKIXdTeletexPersonalNamejhhdOTP-PKIXd x400-pds-namealhdidhdvaluedefdtruebÃdpds-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebðdOTP-PKIXdPDSNamejhhdOTP-PKIXd#x400-physical-delivery-country-namealhdidhdvaluedefdtruebÇdphysical-delivery-country-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebôdOTP-PKIXdPhysicalDeliveryCountryNamejhhdOTP-PKIXdx400-postal-codea lhdidhdvaluedefdtruebÏd postal-codehdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebødOTP-PKIXd PostalCodejhhdOTP-PKIXd"x400-physical-delivery-office-namea lhdidhdvaluedefdtruebÕdphysical-delivery-office-namehdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebüdOTP-PKIXdPhysicalDeliveryOfficeNamejhhdOTP-PKIXd$x400-physical-delivery-office-numbera lhdidhdvaluedefdtruebÙdphysical-delivery-office-numberhdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebdOTP-PKIXdPhysicalDeliveryOfficeNumberjhhdOTP-PKIXd$x400-extension-OR-address-componentsa lhdidhdvaluedefdtruebÝdextension-OR-address-componentshdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebdOTP-PKIXdExtensionORAddressComponentsjhhdOTP-PKIXd$x400-physical-delivery-personal-namea lhdidhdvaluedefdtruebádphysical-delivery-personal-namehdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebdOTP-PKIXdPhysicalDeliveryPersonalNamejhhdOTP-PKIXd(x400-physical-delivery-organization-namealhdidhdvaluedefdtruebåd#physical-delivery-organization-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb dOTP-PKIXd PhysicalDeliveryOrganizationNamejhhdOTP-PKIXd3x400-extension-physical-delivery-address-componentsalhdidhdvaluedefdtruebéd.extension-physical-delivery-address-componentshdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebdOTP-PKIXd*ExtensionPhysicalDeliveryAddressComponentsjhhdOTP-PKIXdx400-unformatted-postal-addressalhdidhdvaluedefdtruebídunformatted-postal-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebdOTP-PKIXdUnformattedPostalAddressjhhdOTP-PKIXdx400-street-addressalhdidhdvaluedefdtruebödstreet-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebdOTP-PKIXd StreetAddressjhhdOTP-PKIXdx400-post-office-box-addressalhdidhdvaluedefdtruebúdpost-office-box-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebdOTP-PKIXdPostOfficeBoxAddressjhhdOTP-PKIXdx400-poste-restante-addressalhdidhdvaluedefdtruebþdposte-restante-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb!dOTP-PKIXdPosteRestanteAddressjhhdOTP-PKIXdx400-unique-postal-namealhdidhdvaluedefdtruebdunique-postal-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb%dOTP-PKIXdUniquePostalNamejhhdOTP-PKIXdx400-local-postal-attributesalhdidhdvaluedefdtruebdlocal-postal-attributeshdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb)dOTP-PKIXdLocalPostalAttributesjhhdOTP-PKIXdx400-extended-network-addressalhdidhdvaluedefdtruebdextended-network-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb-dOTP-PKIXdExtendedNetworkAddressjhhdOTP-PKIXdx400-terminal-typealhdidhdvaluedefdtrueb!d terminal-typehdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb1dOTP-PKIXd TerminalTypejhhdOTP-PKIXd&x400-teletex-domain-defined-attributesalhdidhdvaluedefdtrueb-d!teletex-domain-defined-attributeshdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb5dOTP-PKIXdTeletexDomainDefinedAttributesjjtbWLAƒhdECPointhdtypedefdtrueaÎdECPointhdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnonbWLAƒhd prime-fieldhdvaluedefdtruea—d prime-fieldhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaöbWLAƒhd TargetCerthdtypedefdtruea}d TargetCerthdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea~dtargetCertificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea~dOTP-PKIXd IssuerSerialjjdnod mandatorylhd UNIVERSALajhd ComponentTypead targetNamehdtypejhdExternaltypereferenceadOTP-PKIXd GeneralNamejjdnodOPTIONALl hdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTajhd ComponentTypea€dcertDigestInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea€dOTP-PKIXdObjectDigestInfojjdnodOPTIONALlhd UNIVERSALajjjjdnobWLAƒhdDomainComponenthdtypedefdtrueaÍdDomainComponenthdtypelhdtagd UNIVERSALadIMPLICITajd IA5Stringjjdno¨bWLAƒhdid-domainComponenthdvaluedefdtrueaÊdid-domainComponenthdtypejhdExternaltypereferenceaÊdPKIX1Explicit88d AttributeTypejjdnohaa b &b$ù,adaabWLAƒhddomainComponenthdtypedefdtrueaâddomainComponenthdObjecthdExternaltypereferenceaâdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaÊdid-domainComponenthdtypejhdExternaltypereferenceaÊdPKIX1Explicit88d AttributeTypejjdnohaa b &b$ù,adaahdTypehdExternaltypereferenceaädOTP-PKIXdDomainComponentjbbWLAƒhd id-at-rolehdvaluedefdtruea(d id-at-rolehdtypejdOBJECT IDENTIFIERjjdnohaaaaHˆbWLAƒhdInvalidityDatehdtypedefdtrueb[dInvalidityDatehdtypelhdtagd UNIVERSALadIMPLICITajdGeneralizedTimejjdno”bWLAƒhdHoldInstructionCodehdtypedefdtruebCdHoldInstructionCodehdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdno©bWLAƒhdSubjectAltNamehdtypedefdtruea~dSubjectAltNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea~dOTP-PKIXd GeneralNamesjjdno…bWLAƒhd#physical-delivery-organization-namehdvaluedefdtruebåd#physical-delivery-organization-namehdtypejdINTEGERjjdnoa®bWLAƒhdDistinguishedNamehdtypedefdtrueaßdDistinguishedNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaßdOTP-PKIXd RDNSequencejjdno’bWLAƒhd id-at-surnamehdvaluedefdtrueaSd id-at-surnamehdtypejhdExternaltypereferenceaSdPKIX1Explicit88d AttributeTypejjdnohaaaaâbWLAƒhd Attributehdtypedefdtruea:d Attributehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea;dtypehdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadid-ce-privateKeyUsagePeriodhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebjdOTP-PKIXdPrivateKeyUsagePeriodjhhdOTP-PKIXdsubjectKeyIdentifierhaaaalhdidhdvaluedefdtruea)did-ce-subjectKeyIdentifierhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebbdOTP-PKIXdSubjectKeyIdentifierjhhdOTP-PKIXdcertificatePolicieshaaaa lhdidhdvaluedefdtrueaGdid-ce-certificatePolicieshdtypejdOBJECT IDENTIFIERjjdnohaaaa hdTypehdExternaltypereferencebndOTP-PKIXdCertificatePoliciesjhhdOTP-PKIXdpolicyMappingshaaaa!lhdidhdvaluedefdtrueatdid-ce-policyMappingshdtypejdOBJECT IDENTIFIERjjdnohaaaa!hdTypehdExternaltypereferencebrdOTP-PKIXdPolicyMappingsjhhdOTP-PKIXdsubjectAltNamehaaaalhdidhdvaluedefdtruea|did-ce-subjectAltNamehdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebvdOTP-PKIXdSubjectAltNamejhhdOTP-PKIXdbasicConstraintshaaaalhdidhdvaluedefdtruea¤did-ce-basicConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb‚dOTP-PKIXdBasicConstraintsjhhdOTP-PKIXd issuerAltNamehaaaalhdidhdvaluedefdtrueašdid-ce-issuerAltNamehdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebzdOTP-PKIXd IssuerAltNamejhhdOTP-PKIXdsubjectDirectoryAttributeshaaaa lhdidhdvaluedefdtrueažd id-ce-subjectDirectoryAttributeshdtypejdOBJECT IDENTIFIERjjdnohaaaa hdTypehdExternaltypereferenceb~dOTP-PKIXdSubjectDirectoryAttributesjhhdOTP-PKIXdcRLDistributionPointshaaaalhdidhdvaluedefdtrueaÇdid-ce-cRLDistributionPointshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebŽdOTP-PKIXdCRLDistributionPointsjhhdOTP-PKIXdnameConstraintshaaaalhdidhdvaluedefdtruea¬did-ce-nameConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb†dOTP-PKIXdNameConstraintsjhhdOTP-PKIXdpolicyConstraintshaaaa$lhdidhdvaluedefdtruea½did-ce-policyConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaa$hdTypehdExternaltypereferencebŠdOTP-PKIXdPolicyConstraintsjhhdOTP-PKIXdauthorityInfoAccessh aaaaaaaaalhdidhdvaluedefdtruebdid-pe-authorityInfoAccesshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaahdTypehdExternaltypereferencebždOTP-PKIXdAuthorityInfoAccessSyntaxjhhdOTP-PKIXd extKeyUsagehaaaa%lhdidhdvaluedefdtrueaádid-ce-extKeyUsagehdtypejdOBJECT IDENTIFIERjjdnohaaaa%hdTypehdExternaltypereferenceb’dOTP-PKIXdExtKeyUsageSyntaxjhhdOTP-PKIXd freshestCRLhaaaa.lhdidhdvaluedefdtrueaýdid-ce-freshestCRLhdtypejdOBJECT IDENTIFIERjjdnohaaaa.hdTypehdExternaltypereferencebšdOTP-PKIXd FreshestCRLjhhdOTP-PKIXdinhibitAnyPolicyhaaaa6lhdidhdvaluedefdtruea÷did-ce-inhibitAnyPolicyhdtypejdOBJECT IDENTIFIERjjdnohaaaa6hdTypehdExternaltypereferenceb–dOTP-PKIXdInhibitAnyPolicyjhhdOTP-PKIXd cRLNumberhaaaalhdidhdvaluedefdtruebdid-ce-cRLNumberhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb¦dOTP-PKIXd CRLNumberjhhdOTP-PKIXdissuingDistributionPointhaaaalhdidhdvaluedefdtruebdid-ce-issuingDistributionPointhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebªdOTP-PKIXdIssuingDistributionPointjhhdOTP-PKIXdsubjectInfoAccessh aaaaaaaaa lhdidhdvaluedefdtruebdid-pe-subjectInfoAccesshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa hdTypehdExternaltypereferenceb¢dOTP-PKIXdSubjectInfoAccessSyntaxjhhdOTP-PKIXd cRLReasonshaaaalhdidhdvaluedefdtrueb+did-ce-cRLReasonshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb²dOTP-PKIXd CRLReasonjhhdOTP-PKIXdcertificateIssuerhaaaalhdidhdvaluedefdtrueb;did-ce-certificateIssuerhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb¶dOTP-PKIXdCertificateIssuerjhhdOTP-PKIXddeltaCRLIndicatorhaaaalhdidhdvaluedefdtrueb%did-ce-deltaCRLIndicatorhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb®dOTP-PKIXd BaseCRLNumberjhhdOTP-PKIXdholdInstructionCodehaaaalhdidhdvaluedefdtruebAdid-ce-holdInstructionCodehdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebºdOTP-PKIXdHoldInstructionCodejhhdOTP-PKIXdinvalidityDatehaaaalhdidhdvaluedefdtruebYdid-ce-invalidityDatehdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb¾dOTP-PKIXdInvalidityDatejjkbWLAƒhdinitialshdtypedefdtruea²dinitialshdObjecthdExternaltypereferencea²dOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaUdid-at-initialshdtypejhdExternaltypereferenceaUdPKIX1Explicit88d AttributeTypejjdnohaaaa+hdTypehdExternaltypereferencea´dOTP-PKIXdX520namejˆbWLAƒhdcharacteristic-two-fieldhdvaluedefdtrueaždcharacteristic-two-fieldhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaƒbWLAƒhd KeyPurposeIdhdtypedefdtrueaæd KeyPurposeIdhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdno]bWLAƒhd TBSCertListhdtypedefdtrueb#d TBSCertListhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeb$dversionhdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhdv1ahdv2ahdv3ajjjdnodOPTIONALlhd UNIVERSALajhd ComponentTypeb&d signaturehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb&dOTP-PKIXdAlgorithmIdentifierjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb'dissuerhdtypejhdExternaltypereferenceb'dOTP-PKIXdNamejjdnod mandatorylhd UNIVERSALajhd ComponentTypeb(d thisUpdatehdtypejhdExternaltypereferenceb(dOTP-PKIXdTimejjdnod mandatorylhd UNIVERSALahd UNIVERSALajhd ComponentTypeb)d nextUpdatehdtypejhdExternaltypereferenceb)dOTP-PKIXdTimejjdnodOPTIONALlhd UNIVERSALahd UNIVERSALajhd ComponentTypeb*drevokedCertificateshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeb+duserCertificatehdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb,drevocationDatehdtypejhdExternaltypereferenceb,dOTP-PKIXdTimejjdnod mandatorylhd UNIVERSALahd UNIVERSALajhd ComponentTypeb-dcrlEntryExtensionshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb-dOTP-PKIXd ExtensionsjjdnodOPTIONALlhd UNIVERSALajjjjdnojjdnodOPTIONALlhd UNIVERSALajhd ComponentTypeb0d crlExtensionshdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb0dOTP-PKIXd ExtensionsjjdnodOPTIONALlhdCONTEXTajjjjdnoRbWLAƒhdfield-prime-fieldhdtypedefdtrueb‰dfield-prime-fieldhdObjecthdExternaltypereferenceb‰dOTP-PKIXdFIELD-ID-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea—d prime-fieldhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdExternaltypereferenceb‹dOTP-PKIXdPrime-pj’bWLAƒhdECDSA-Sig-ValuehdtypedefdtrueadECDSA-Sig-Valuehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaŽdrhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadshdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajjjjdnotbWLAƒhdid-ce-issuerAltNamehdvaluedefdtrueašdid-ce-issuerAltNamehdtypejdOBJECT IDENTIFIERjjdnohaaaajbWLAƒhdid-ce-keyUsagehdvaluedefdtruea/did-ce-keyUsagehdtypejdOBJECT IDENTIFIERjjdnohaaaaªbWLAƒhdTeletexCommonNamehdtypedefdtrueb§dTeletexCommonNamehdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa@jjdnocbWLAƒhdTimehdtypedefdtrueb dTimehdtypejhdCHOICElhd ComponentTypeb dutcTimehdtypelhdtagd UNIVERSALadIMPLICITajdUTCTimejjdnod mandatorylhd UNIVERSALajhd ComponentTypeb d generalTimehdtypelhdtagd UNIVERSALadIMPLICITajdGeneralizedTimejjdnod mandatorylhd UNIVERSALajjjjdnoúbWLAƒhdNamehdtypedefdtrueaÚdNamehdtypejhdCHOICElhd ComponentTypeaÛd rdnSequencehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaÛdOTP-PKIXd RDNSequencejjdnod mandatorylhd UNIVERSALajjjjdnojbWLAƒhdholdInstructionCodehdtypedefdtrueb¸dholdInstructionCodehdObjecthdExternaltypereferenceb¸dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebAdid-ce-holdInstructionCodehdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebºdOTP-PKIXdHoldInstructionCodej“bWLAƒhd$x400-physical-delivery-personal-namehdtypedefdtruebd$x400-physical-delivery-personal-namehdObjecthdExternaltypereferencebdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebádphysical-delivery-personal-namehdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebdOTP-PKIXdPhysicalDeliveryPersonalNamejEbWLAƒhdx400-postal-codehdtypedefdtruebödx400-postal-codehdObjecthdExternaltypereferencebödOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebÏd postal-codehdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebødOTP-PKIXd PostalCodejnbWLAƒhd givenNamehdtypedefdtruea®d givenNamehdObjecthdExternaltypereferencea®dOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaTdid-at-givenNamehdtypejhdExternaltypereferenceaTdPKIX1Explicit88d AttributeTypejjdnohaaaa*hdTypehdExternaltypereferencea°dOTP-PKIXdX520namej_bWLAƒhdnamehdtypedefdtruea¦dnamehdObjecthdExternaltypereferencea¦dOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaRd id-at-namehdtypejhdExternaltypereferenceaRdPKIX1Explicit88d AttributeTypejjdnohaaaa)hdTypehdExternaltypereferencea¨dOTP-PKIXdX520namejzbWLAƒhdid-kp-OCSPSigninghdvaluedefdtrueaódid-kp-OCSPSigninghdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa mbWLAƒhdub-e163-4-number-lengthhdvaluedefdtruebOdub-e163-4-number-lengthhdtypejdINTEGERjjdnoa„bWLAƒhdid-pe-ac-auditIdentityhdvaluedefdtrueadid-pe-ac-auditIdentityhdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa¦bWLAƒhd ec-public-keyhdtypedefdtrueb¯d ec-public-keyhdObjecthdExternaltypereferenceb¯dOTP-PKIXdPUBLIC-KEY-ALGORITHM-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaêdid-ecPublicKeyhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdExternaltypereferenceb±dOTP-PKIXdEcpkParametershd PublicKeyTypehdExternaltypereferenceb²dOTP-PKIXdECPointj~bWLAƒhd KEA-PublicKeyhdtypedefdtruebhd KEA-PublicKeyhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdno‰bWLAƒhdid-keyExchangeAlgorithmhdvaluedefdtrueardid-keyExchangeAlgorithmhdtypejdOBJECT IDENTIFIERjjdnoh aabHaaeaaaaµbWLAƒhd X520PseudonymhdtypedefdtrueaÁd X520PseudonymhdtypejhdCHOICElhd ComponentTypeaÂd teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÃdprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÄduniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÅd utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALa jhd ComponentTypeaÆd bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajjjjdnoRbWLAƒhdPublicKeyAlgorithmhdtypedefdtruebdPublicKeyAlgorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedPublicKeyAlgorithmsd algorithmadiddidjlhd ComponentTypebd algorithmhdtypelhdtagd UNIVERSALadIMPLICITajhdObjectClassFieldTypehdExternaltypereferencebdSSL-PKIXdPUBLIC-KEY-ALGORITHM-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhd simpletabledSupportedPublicKeyAlgorithmsjjdnod mandatorylhd UNIVERSALajhd ComponentTypebd parametershdtypejhdObjectClassFieldTypehdExternaltypereferencebdSSL-PKIXdPUBLIC-KEY-ALGORITHM-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetbhdExternaltypereferencebdOTP-PKIXdSupportedPublicKeyAlgorithmslhd outermostlhdExternalvaluereferencebdSSL-PKIXd algorithmjjjlhdobjfunhdExternaltypereferencebdOTP-PKIXdSupportedPublicKeyAlgorithmsjdnodOPTIONALjjjjdno5bWLAƒhdAccessDescriptionhdtypedefdtruebdAccessDescriptionhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeb d accessMethodhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb daccessLocationhdtypejhdExternaltypereferenceb dOTP-PKIXd GeneralNamejjdnod mandatoryl hdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTajjjjdnorbWLAƒhdBooleanhdtypedefdtruebJdBooleanhdtypelhdtagd UNIVERSALadIMPLICITajdBOOLEANjjdnoÆbWLAƒhdDigestAlgorithmIdentifierhdtypedefdtruea3dDigestAlgorithmIdentifierhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea3dOTP-PKIXdAlgorithmIdentifierjjdnoûbWLAƒhd PDSParameterhdtypedefdtrueb d PDSParameterhdtypelhdtagd UNIVERSALadIMPLICITa jhdSETdfalsedtruedfalselhd ComponentTypeb dprintable-stringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnodOPTIONALlhd UNIVERSALajhd ComponentTypeb dteletex-stringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaajjdnodOPTIONALlhd UNIVERSALajjjjdno’bWLAƒhdCertificateSerialNumberhdtypedefdtruebdCertificateSerialNumberhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnobWLAƒhd serialNumberhdtypedefdtrueaÚd serialNumberhdObjecthdExternaltypereferenceaÚdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea¹did-at-serialNumberhdtypejhdExternaltypereferencea¹dPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaÜdOTP-PKIXdX520SerialNumberjvbWLAƒhdid-aca-encAttrshdvaluedefdtruea&did-aca-encAttrshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa a=bWLAƒhd ReasonFlagshdtypedefdtrueaÔd ReasonFlagshdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGl hdunusedahd keyCompromiseahd cACompromiseahdaffiliationChangedahd supersededahdcessationOfOperationahdcertificateHoldahdprivilegeWithdrawnahd aACompromiseajjjdnoçbWLAƒhd GeneralNameshdtypedefdtruea€d GeneralNameshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypejhdExternaltypereferencea€dOTP-PKIXd GeneralNamejjdnolhdSizeConstrainthadMAXjjdnoGbWLAƒhdTeletexDomainDefinedAttributeshdtypedefdtrueb/dTeletexDomainDefinedAttributeshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb0dOTP-PKIXdTeletexDomainDefinedAttributejjdnolhdSizeConstrainthaajjdnoEbWLAƒhd cRLReasonshdtypedefdtrueb°d cRLReasonshdObjecthdExternaltypereferenceb°dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueb+did-ce-cRLReasonshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb²dOTP-PKIXd CRLReasonjQbWLAƒhdx400-street-addresshdtypedefdtruebdx400-street-addresshdObjecthdExternaltypereferencebdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebödstreet-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebdOTP-PKIXd StreetAddressjbWLAƒhdid-holdinstruction-rejecthdvaluedefdtruebTdid-holdinstruction-rejecthdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aa­bWLAƒhdAttributeCertificatehdtypedefdtruea0dAttributeCertificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea1dacinfohdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea1dOTP-PKIXdAttributeCertificateInfojjdnod mandatorylhd UNIVERSALajhd ComponentTypea2dsignatureAlgorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea2dOTP-PKIXdAlgorithmIdentifierjjdnod mandatorylhd UNIVERSALajhd ComponentTypea3dsignatureValuehdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnod mandatorylhd UNIVERSALajjjjdno%bWLAƒhdNoticeReferencehdtypedefdtrueahdNoticeReferencehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaid organizationhdtypejhdExternaltypereferenceaidOTP-PKIXd DisplayTextjjdnod mandatorylhd UNIVERSALahd UNIVERSALahd UNIVERSALahd UNIVERSALa jhd ComponentTypeajd noticeNumbershdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnojjdnod mandatorylhd UNIVERSALajjjjdnoPbWLAƒhdub-namehdvaluedefdtrueb=dub-namehdtypejdINTEGERjjdnob€ËbWLAƒhdPhysicalDeliveryPersonalNamehdtypedefdtruebãdPhysicalDeliveryPersonalNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebãdOTP-PKIXd PDSParameterjjdnoìbWLAƒhdExtensionAttributehdtypedefdtrueb™dExtensionAttributehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebšdextension-attribute-typehdtypelhdtagdCONTEXTadIMPLICITajdINTEGERlhd ValueRangehabjjdnod mandatorylhdCONTEXTajhd ComponentTypebœdextension-attribute-valuehdtypelhdtagdCONTEXTadEXPLICITa jdASN1_OPEN_TYPEjjdnod mandatorylhdCONTEXTajjjjdnoªbWLAƒhdOrganizationNamehdtypedefdtruebndOrganizationNamehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdno–bWLAƒhdid-at-givenNamehdvaluedefdtrueaTdid-at-givenNamehdtypejhdExternaltypereferenceaTdPKIX1Explicit88d AttributeTypejjdnohaaaa*bWLAƒhdorganizationNamehdtypedefdtrueaÆdorganizationNamehdObjecthdExternaltypereferenceaÆdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea‚did-at-organizationNamehdtypejhdExternaltypereferencea‚dPKIX1Explicit88d AttributeTypejjdnohaaaa hdTypehdExternaltypereferenceaÈdOTP-PKIXdX520OrganizationNamejhbWLAƒhdsurnamehdtypedefdtrueaªdsurnamehdObjecthdExternaltypereferenceaªdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaSd id-at-surnamehdtypejhdExternaltypereferenceaSdPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferencea¬dOTP-PKIXdX520namejøbWLAƒhdExtKeyUsageSyntaxhdtypedefdtrueaãdExtKeyUsageSyntaxhdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhdSizeConstrainthadMAXjjdnoibWLAƒhdub-terminal-id-lengthhdvaluedefdtrueb_dub-terminal-id-lengthhdtypejdINTEGERjjdnoaabWLAƒhdub-surname-lengthhdvaluedefdtrueb^dub-surname-lengthhdtypejdINTEGERjjdnoa(wbWLAƒhdub-country-name-alpha-lengthhdvaluedefdtruebHdub-country-name-alpha-lengthhdtypejdINTEGERjjdnoaÔbWLAƒhdABSTRACT-SYNTAXhdclassdefdtrued undefineddABSTRACT-SYNTAXhd objectclasslhdfixedtypevaluefielddidhdtypejdOBJECT IDENTIFIERjjdnodUNIQUEd MANDATORYhd typefielddTyped MANDATORYhdfixedtypevaluefielddpropertyhdtypejhd BIT STRINGjjjdnod undefinedhdDEFAULTkjhd WITH SYNTAXlhdtypefieldreferencedTyped IDENTIFIEDdBYhdvaluefieldreferencedidldHASdPROPERTYhdvaluefieldreferencedpropertyjj‚bWLAƒhdid-aca-accessIdentityhdvaluedefdtruea"did-aca-accessIdentityhdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa aPbWLAƒhdSignatureAlgorithmhdtypedefdtruebdSignatureAlgorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedSignatureAlgorithmsd algorithmadiddidjlhd ComponentTypebd algorithmhdtypelhdtagd UNIVERSALadIMPLICITajhdObjectClassFieldTypehdExternaltypereferencebdSSL-PKIXdSIGNATURE-ALGORITHM-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhd simpletabledSupportedSignatureAlgorithmsjjdnod mandatorylhd UNIVERSALajhd ComponentTypebd parametershdtypejhdObjectClassFieldTypehdExternaltypereferencebdSSL-PKIXdSIGNATURE-ALGORITHM-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetbhdExternaltypereferencebdOTP-PKIXdSupportedSignatureAlgorithmslhd outermostlhdExternalvaluereferencebdSSL-PKIXd algorithmjjjlhdobjfunhdExternaltypereferencebdOTP-PKIXdSupportedSignatureAlgorithmsjdnodOPTIONALjjjjdnoŽbWLAƒhdAttCertVersionhdtypedefdtrueaBdAttCertVersionhdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhdv2ajjjdnobWLAƒhd SvceAuthInfohdtypedefdtrueaŒd SvceAuthInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeadservicehdtypejhdExternaltypereferenceadOTP-PKIXd GeneralNamejjdnod mandatoryl hdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTajhd ComponentTypeaŽdidenthdtypejhdExternaltypereferenceaŽdOTP-PKIXd GeneralNamejjdnod mandatoryl hdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTajhd ComponentTypeadauthInfohdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnodOPTIONALlhd UNIVERSALajjjjdnopbWLAƒhd id-aca-grouphdvaluedefdtruea$d id-aca-grouphdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa abWLAƒhdid-ce-certificateIssuerhdvaluedefdtrueb;did-ce-certificateIssuerhdtypejdOBJECT IDENTIFIERjjdnohaaaaŽbWLAƒhdSubjectKeyIdentifierhdtypedefdtruea+dSubjectKeyIdentifierhdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdno}bWLAƒhdphysical-delivery-office-numberhdvaluedefdtruebÙdphysical-delivery-office-numberhdtypejdINTEGERjjdnoa kbWLAƒhdsubjectKeyIdentifierhdtypedefdtrueb`dsubjectKeyIdentifierhdObjecthdExternaltypereferenceb`dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea)did-ce-subjectKeyIdentifierhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebbdOTP-PKIXdSubjectKeyIdentifierjFbWLAƒhdDomainParametershdtypedefdtrueacdDomainParametershdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaddphdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaedghdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeafdqhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeagdjhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnodOPTIONALlhd UNIVERSALajhd ComponentTypeahdvalidationParmshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceahdOTP-PKIXdValidationParmsjjdnodOPTIONALlhd UNIVERSALajjjjdno~bWLAƒhdSupportedAttributeTypeAndValueshdtypedefdtruea dSupportedAttributeTypeAndValueshd ObjectSethdExternaltypereferencea dOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruedidlhhdOTP-PKIXdgenerationQualifierhaaaa,lhdidhdvaluedefdtrueaVdid-at-generationQualifierhdtypejhdExternaltypereferenceaVdPKIX1Explicit88d AttributeTypejjdnohaaaa,hdTypehdExternaltypereferencea¸dOTP-PKIXdX520namejhhdOTP-PKIXd givenNamehaaaa*lhdidhdvaluedefdtrueaTdid-at-givenNamehdtypejhdExternaltypereferenceaTdPKIX1Explicit88d AttributeTypejjdnohaaaa*hdTypehdExternaltypereferencea°dOTP-PKIXdX520namejhhdOTP-PKIXdinitialshaaaa+lhdidhdvaluedefdtrueaUdid-at-initialshdtypejhdExternaltypereferenceaUdPKIX1Explicit88d AttributeTypejjdnohaaaa+hdTypehdExternaltypereferencea´dOTP-PKIXdX520namejhhdOTP-PKIXdnamehaaaa)lhdidhdvaluedefdtrueaRd id-at-namehdtypejhdExternaltypereferenceaRdPKIX1Explicit88d AttributeTypejjdnohaaaa)hdTypehdExternaltypereferencea¨dOTP-PKIXdX520namejhhdOTP-PKIXdsurnamehaaaalhdidhdvaluedefdtrueaSd id-at-surnamehdtypejhdExternaltypereferenceaSdPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferencea¬dOTP-PKIXdX520namejhhdOTP-PKIXd commonNamehaaaalhdidhdvaluedefdtrueaadid-at-commonNamehdtypejhdExternaltypereferenceaadPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferencea¼dOTP-PKIXdX520CommonNamejhhdOTP-PKIXd localityNamehaaaalhdidhdvaluedefdtruealdid-at-localityNamehdtypejhdExternaltypereferencealdPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaÀdOTP-PKIXdX520LocalityNamejhhdOTP-PKIXdorganizationNamehaaaa lhdidhdvaluedefdtruea‚did-at-organizationNamehdtypejhdExternaltypereferencea‚dPKIX1Explicit88d AttributeTypejjdnohaaaa hdTypehdExternaltypereferenceaÈdOTP-PKIXdX520OrganizationNamejhhdOTP-PKIXdstateOrProvinceNamehaaaalhdidhdvaluedefdtrueawdid-at-stateOrProvinceNamehdtypejhdExternaltypereferenceawdPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaÄdOTP-PKIXdX520StateOrProvinceNamejhhdOTP-PKIXd countryNamehaaaalhdidhdvaluedefdtruea³did-at-countryNamehdtypejhdExternaltypereferencea³dPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaØdOTP-PKIXdX520countryNamejhhdOTP-PKIXd dnQualifierhaaaa.lhdidhdvaluedefdtruea­did-at-dnQualifierhdtypejhdExternaltypereferencea­dPKIX1Explicit88d AttributeTypejjdnohaaaa.hdTypehdExternaltypereferenceaÔdOTP-PKIXdX520dnQualifierjhhdOTP-PKIXdorganizationalUnitNamehaaaa lhdidhdvaluedefdtruea’did-at-organizationalUnitNamehdtypejhdExternaltypereferencea’dPKIX1Explicit88d AttributeTypejjdnohaaaa hdTypehdExternaltypereferenceaÌdOTP-PKIXdX520OrganizationalUnitNamejhhdOTP-PKIXdtitlehaaaa lhdidhdvaluedefdtruea¢d id-at-titlehdtypejhdExternaltypereferencea¢dPKIX1Explicit88d AttributeTypejjdnohaaaa hdTypehdExternaltypereferenceaÐdOTP-PKIXd X520TitlejhhdOTP-PKIXddomainComponenthaa b &b$ù,adaalhdidhdvaluedefdtrueaÊdid-domainComponenthdtypejhdExternaltypereferenceaÊdPKIX1Explicit88d AttributeTypejjdnohaa b &b$ù,adaahdTypehdExternaltypereferenceaädOTP-PKIXdDomainComponentjhhdOTP-PKIXd emailAddresshaabHb»aa alhdidhdvaluedefdtrueaÔdid-emailAddresshdtypejhdExternaltypereferenceaÔdPKIX1Explicit88d AttributeTypejjdnohaabHb»aa ahdTypehdExternaltypereferenceaèdOTP-PKIXd EmailAddressjhhdOTP-PKIXd pseudonymhaaaaAlhdidhdvaluedefdtruea¿did-at-pseudonymhdtypejhdExternaltypereferencea¿dPKIX1Explicit88d AttributeTypejjdnohaaaaAhdTypehdExternaltypereferenceaàdOTP-PKIXd X520PseudonymjhhdOTP-PKIXd serialNumberhaaaalhdidhdvaluedefdtruea¹did-at-serialNumberhdtypejhdExternaltypereferencea¹dPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaÜdOTP-PKIXdX520SerialNumberjjpbWLAƒhdid-ce-extKeyUsagehdvaluedefdtrueaádid-ce-extKeyUsagehdtypejdOBJECT IDENTIFIERjjdnohaaaa%ûbWLAƒhd UserNoticehdtypedefdtrueadd UserNoticehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaed noticeRefhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaedOTP-PKIXdNoticeReferencejjdnodOPTIONALlhd UNIVERSALajhd ComponentTypeafd explicitTexthdtypejhdExternaltypereferenceafdOTP-PKIXd DisplayTextjjdnodOPTIONALlhd UNIVERSALahd UNIVERSALahd UNIVERSALahd UNIVERSALa jjjjdnoYbWLAƒhd terminal-typehdvaluedefdtrueb!d terminal-typehdtypejdINTEGERjjdnoaObWLAƒhdpds-namehdvaluedefdtruebÃdpds-namehdtypejdINTEGERjjdnoaEbWLAƒhd PersonalNamehdtypedefdtruebud PersonalNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdSETdfalsedtruedfalselhd ComponentTypebvdsurnamehdtypelhdtagdCONTEXTadIMPLICITajdPrintableStringlhdSizeConstrainthaa(jjdnod mandatorylhdCONTEXTajhd ComponentTypebxd given-namehdtypelhdtagdCONTEXTadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajhd ComponentTypebzdinitialshdtypelhdtagdCONTEXTadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajhd ComponentTypeb|dgeneration-qualifierhdtypelhdtagdCONTEXTadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajjjjdno.bWLAƒhdRelativeDistinguishedNamehdtypedefdtrueaádRelativeDistinguishedNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdSET OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaâdOTP-PKIXdAttributeTypeAndValuejjdnolhdSizeConstrainthadMAXjjdnoÏbWLAƒhdX520OrganizationalUnitNamehdtypedefdtruea”dX520OrganizationalUnitNamehdtypejhdCHOICElhd ComponentTypea•d teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea—dprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea™duniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea›d utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALa jhd ComponentTypead bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajjjjdno¤bWLAƒhdid-at-organizationNamehdvaluedefdtruea‚did-at-organizationNamehdtypejhdExternaltypereferencea‚dPKIX1Explicit88d AttributeTypejjdnohaaaa œbWLAƒhdid-at-localityNamehdvaluedefdtruealdid-at-localityNamehdtypejhdExternaltypereferencealdPKIX1Explicit88d AttributeTypejjdnohaaaa‹bWLAƒhd"x400-physical-delivery-office-namehdtypedefdtruebúd"x400-physical-delivery-office-namehdObjecthdExternaltypereferencebúdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebÕdphysical-delivery-office-namehdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebüdOTP-PKIXdPhysicalDeliveryOfficeNamejzbWLAƒhdid-pe-ac-proxyinghdvaluedefdtrueadid-pe-ac-proxyinghdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa qbWLAƒhdub-numeric-user-id-lengthhdvaluedefdtruebUdub-numeric-user-id-lengthhdtypejdINTEGERjjdnoa IbWLAƒhdAnyhdtypedefdtruebKdAnyhdtypejdASN1_OPEN_TYPEjjdnoãbWLAƒhd ProxyInfohdtypedefdtruea»d ProxyInfohdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea»dOTP-PKIXdTargetsjjdnojjdno•bWLAƒhdid-holdinstruction-callissuerhdvaluedefdtruebQdid-holdinstruction-callissuerhdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aaËbWLAƒhdPhysicalDeliveryOfficeNumberhdtypedefdtruebÛdPhysicalDeliveryOfficeNumberhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebÛdOTP-PKIXd PDSParameterjjdnojbWLAƒhdgnBasishdvaluedefdtruea­dgnBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaaGbWLAƒhdBuiltInDomainDefinedAttributeshdtypedefdtruebŠdBuiltInDomainDefinedAttributeshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebŒdOTP-PKIXdBuiltInDomainDefinedAttributejjdnolhdSizeConstrainthaajjdnosbWLAƒhdx400-post-office-box-addresshdtypedefdtruebdx400-post-office-box-addresshdObjecthdExternaltypereferencebdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebúdpost-office-box-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebdOTP-PKIXdPostOfficeBoxAddressjÅbWLAƒhdAttCertValidityPeriodhdtypedefdtrueapdAttCertValidityPeriodhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaqd notBeforeTimehdtypelhdtagd UNIVERSALadIMPLICITajdGeneralizedTimejjdnod mandatorylhd UNIVERSALajhd ComponentTypeard notAfterTimehdtypelhdtagd UNIVERSALadIMPLICITajdGeneralizedTimejjdnod mandatorylhd UNIVERSALajjjjdnoybWLAƒhdid-ce-invalidityDatehdvaluedefdtruebYdid-ce-invalidityDatehdtypejdOBJECT IDENTIFIERjjdnohaaaabWLAƒhd TerminalTypehdtypedefdtrueb#d TerminalTypehdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhdtelexahdteletexahd g3-facsimileahd g4-facsimileahd ia5-terminalahdvideotexajlhd ValueRangehabjjdnoybWLAƒhdphysical-delivery-office-namehdvaluedefdtruebÕdphysical-delivery-office-namehdtypejdINTEGERjjdnoa ˜bWLAƒhdPDSNamehdtypedefdtruebÅdPDSNamehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnoäbWLAƒhd CountryNamehdtypedefdtruebYd CountryNamehdtypelhdtagd APPLICATIONadEXPLICITa jhdCHOICElhd ComponentTypebZd x121-dcc-codehdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstraintajjdnod mandatorylhd UNIVERSALajhd ComponentTypeb\diso-3166-alpha2-codehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstraintajjdnod mandatorylhd UNIVERSALajjjjdno`bWLAƒhdid-pehdvaluedefdtruea!did-pehdtypejdOBJECT IDENTIFIERjjdnohaaaaaaaaMbWLAƒhdx400-terminal-typehdtypedefdtrueb/dx400-terminal-typehdObjecthdExternaltypereferenceb/dOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueb!d terminal-typehdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb1dOTP-PKIXd TerminalTypej{bWLAƒhd countryNamehdtypedefdtrueaÖd countryNamehdObjecthdExternaltypereferenceaÖdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea³did-at-countryNamehdtypejhdExternaltypereferencea³dPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaØdOTP-PKIXdX520countryNamejbbWLAƒhdid-pkixhdvaluedefdtrueadid-pkixhdtypejdOBJECT IDENTIFIERjjdnohaaaaaaapbWLAƒhdid-ce-freshestCRLhdvaluedefdtrueaýdid-ce-freshestCRLhdtypejdOBJECT IDENTIFIERjjdnohaaaa.WbWLAƒhd ub-pseudonymhdvaluedefdtrueb]d ub-pseudonymhdtypejdINTEGERjjdnoa€sbWLAƒhd pseudonymhdtypedefdtrueaÞd pseudonymhdObjecthdExternaltypereferenceaÞdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea¿did-at-pseudonymhdtypejhdExternaltypereferencea¿dPKIX1Explicit88d AttributeTypejjdnohaaaaAhdTypehdExternaltypereferenceaàdOTP-PKIXd X520PseudonymjæbWLAƒhdrsa-encryptionhdtypedefdtruebPdrsa-encryptionhdObjecthdExternaltypereferencebPdOTP-PKIXdPUBLIC-KEY-ALGORITHM-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaCd rsaEncryptionhdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnohd PublicKeyTypehdExternaltypereferencebSdOTP-PKIXd RSAPublicKeyj¸bWLAƒhdAttributeCertificateInfohdtypedefdtruea6dAttributeCertificateInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalsel hd ComponentTypea7dversionhdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhdv2ajjjdnod mandatorylhd UNIVERSALajhd ComponentTypea8dholderhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea8dOTP-PKIXdHolderjjdnod mandatorylhd UNIVERSALajhd ComponentTypea9dissuerhdtypejhdExternaltypereferencea9dOTP-PKIXd AttCertIssuerjjdnod mandatorylhd UNIVERSALahdCONTEXTajhd ComponentTypea:d signaturehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea:dOTP-PKIXdAlgorithmIdentifierjjdnod mandatorylhd UNIVERSALajhd ComponentTypea;d serialNumberhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadissuerUniqueIDhdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnodOPTIONALlhd UNIVERSALajhd ComponentTypea?d extensionshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea?dOTP-PKIXd ExtensionsjjdnodOPTIONALlhd UNIVERSALajjjjdnoxbWLAƒhdid-dsa-with-sha1hdvaluedefdtruea/did-dsa-with-sha1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aa^bWLAƒhdmd2hdvaluedefdtrueadmd2hdtypejdOBJECT IDENTIFIERjjdnohaabHb»aa_bWLAƒhdub-serial-numberhdvaluedefdtruebDdub-serial-numberhdtypejdINTEGERjjdnoa@{bWLAƒhd dnQualifierhdtypedefdtrueaÒd dnQualifierhdObjecthdExternaltypereferenceaÒdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea­did-at-dnQualifierhdtypejhdExternaltypereferencea­dPKIX1Explicit88d AttributeTypejjdnohaaaa.hdTypehdExternaltypereferenceaÔdOTP-PKIXdX520dnQualifierjjbWLAƒhdppBasishdvaluedefdtruea¾dppBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaajbWLAƒhdtpBasishdvaluedefdtruea´dtpBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaaqbWLAƒhdid-ce-cRLReasonshdvaluedefdtrueb+did-ce-cRLReasonshdtypejdOBJECT IDENTIFIERjjdnohaaaa|bWLAƒhdid-ce-policyConstraintshdvaluedefdtruea½did-ce-policyConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaa$vbWLAƒhdid-ce-policyMappingshdvaluedefdtrueatdid-ce-policyMappingshdtypejdOBJECT IDENTIFIERjjdnohaaaa!wbWLAƒhdub-domain-defined-attributeshdvaluedefdtruebJdub-domain-defined-attributeshdtypejdINTEGERjjdnoambWLAƒhdpost-office-box-addresshdvaluedefdtruebúdpost-office-box-addresshdtypejdINTEGERjjdnoa­bWLAƒhd StreetAddresshdtypedefdtruebød StreetAddresshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebødOTP-PKIXd PDSParameterjjdnorbWLAƒhdsubjectInfoAccesshdtypedefdtrueb dsubjectInfoAccesshdObjecthdExternaltypereferenceb dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebdid-pe-subjectInfoAccesshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa hdTypehdExternaltypereferenceb¢dOTP-PKIXdSubjectInfoAccessSyntaxjXbWLAƒhdEXTENSION-CLASShdclassdefdtrueb;dEXTENSION-CLASShd objectclasslhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnodUNIQUEd MANDATORYhd typefielddTypedOPTIONALjhd WITH SYNTAXldIDhdvaluefieldreferencedidldTYPEhdtypefieldreferencedTypejj›bWLAƒhd&x400-teletex-domain-defined-attributeshdtypedefdtrueb3d&x400-teletex-domain-defined-attributeshdObjecthdExternaltypereferenceb3dOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueb-d!teletex-domain-defined-attributeshdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb5dOTP-PKIXdTeletexDomainDefinedAttributesjNbWLAƒhdpp-basishdtypedefdtrueb©dpp-basishdObjecthdExternaltypereferenceb©dOTP-PKIXdCHARACTERISTIC-TWO-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea¾dppBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaahdTypehdExternaltypereferenceb«dOTP-PKIXd PentanomialjnbWLAƒhdATTRIBUTE-TYPE-AND-VALUE-CLASShdclassdefdtruea“dATTRIBUTE-TYPE-AND-VALUE-CLASShd objectclasslhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnodUNIQUEd MANDATORYhd typefielddTyped MANDATORYjhd WITH SYNTAXldIDhdvaluefieldreferencediddTYPEhdtypefieldreferencedTypej`bWLAƒhdid-adhdvaluedefdtruea'did-adhdtypejdOBJECT IDENTIFIERjjdnohaaaaaaaa0lbWLAƒhd c-TwoCurvehdvaluedefdtrueaðd c-TwoCurvehdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aa^bWLAƒhdmd5hdvaluedefdtrueadmd5hdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaÂbWLAƒhdGeneralSubtreehdtypedefdtruea´dGeneralSubtreehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaµdbasehdtypejhdExternaltypereferenceaµdOTP-PKIXd GeneralNamejjdnod mandatoryl hdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTahdCONTEXTajhd ComponentTypea¶dminimumhdtypelhdtagdCONTEXTadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnohdDEFAULTalhdCONTEXTajhd ComponentTypea·dmaximumhdtypelhdtagdCONTEXTadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnodOPTIONALlhdCONTEXTajjjjdno_bWLAƒhdub-locality-namehdvaluedefdtrueb?dub-locality-namehdtypejdINTEGERjjdnoa€{bWLAƒhdphysical-delivery-country-namehdvaluedefdtruebÇdphysical-delivery-country-namehdtypejdINTEGERjjdnoažbWLAƒhd CommonNamehdtypedefdtrueb£d CommonNamehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdnoUbWLAƒhd common-namehdvaluedefdtrueb¡d common-namehdtypejdINTEGERjjdnoawbWLAƒhd commonNamehdtypedefdtrueaºd commonNamehdObjecthdExternaltypereferenceaºdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaadid-at-commonNamehdtypejhdExternaltypereferenceaadPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferencea¼dOTP-PKIXdX520CommonNamejxbWLAƒhdid-kp-serverAuthhdvaluedefdtrueaîdid-kp-serverAuthhdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaacbWLAƒhdub-pds-name-lengthhdvaluedefdtruebYdub-pds-name-lengthhdtypejdINTEGERjjdnoaibWLAƒhdub-domain-name-lengthhdvaluedefdtruebMdub-domain-name-lengthhdtypejdINTEGERjjdnoawbWLAƒhd DHPublicKeyhdtypedefdtrueaad DHPublicKeyhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnoŸbWLAƒhd RSAPublicKeyhdtypedefdtrueaSd RSAPublicKeyhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaTdmodulushdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaUdpublicExponenthdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajjjjdnoybWLAƒhd DSAPublicKeyhdtypedefdtruea&d DSAPublicKeyhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnoºbWLAƒhdValidityhdtypedefdtruebdValidityhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebd notBeforehdtypejhdExternaltypereferencebdOTP-PKIXdTimejjdnod mandatorylhd UNIVERSALahd UNIVERSALajhd ComponentTypeb dnotAfterhdtypejhdExternaltypereferenceb dOTP-PKIXdTimejjdnod mandatorylhd UNIVERSALahd UNIVERSALajjjjdno|bWLAƒhdid-ce-targetInformationhdvaluedefdtrueadid-ce-targetInformationhdtypejdOBJECT IDENTIFIERjjdnohaaaa7‚bWLAƒhdid-kp-emailProtectionhdvaluedefdtrueañdid-kp-emailProtectionhdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaaxbWLAƒhdfield-characteristic-twohdtypedefdtruebdfield-characteristic-twohdObjecthdExternaltypereferencebdOTP-PKIXdFIELD-ID-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaždcharacteristic-two-fieldhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdExternaltypereferencebŸdOTP-PKIXdCharacteristic-twojubWLAƒhdAuthorityKeyIdentifierhdtypedefdtrueadAuthorityKeyIdentifierhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypead keyIdentifierhdtypelhdtagdCONTEXTadIMPLICITajd OCTET STRINGjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea dauthorityCertIssuerhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea dOTP-PKIXd GeneralNamesjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea!dauthorityCertSerialNumberhdtypelhdtagdCONTEXTadIMPLICITajdINTEGERjjdnodOPTIONALlhdCONTEXTajjjjdno^bWLAƒhddeltaCRLIndicatorhdtypedefdtrueb¬ddeltaCRLIndicatorhdObjecthdExternaltypereferenceb¬dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueb%did-ce-deltaCRLIndicatorhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb®dOTP-PKIXd BaseCRLNumberjsbWLAƒhdauthorityKeyIdentifierhdtypedefdtrueb\dauthorityKeyIdentifierhdObjecthdExternaltypereferenceb\dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueadid-ce-authorityKeyIdentifierhdtypejdOBJECT IDENTIFIERjjdnohaaaa#hdTypehdExternaltypereferenceb^dOTP-PKIXdAuthorityKeyIdentifierj“bWLAƒhd$x400-physical-delivery-office-numberhdtypedefdtruebþd$x400-physical-delivery-office-numberhdObjecthdExternaltypereferencebþdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebÙdphysical-delivery-office-numberhdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebdOTP-PKIXdPhysicalDeliveryOfficeNumberjbWLAƒhdid-characteristic-two-basishdvaluedefdtruea§did-characteristic-two-basishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaÊbWLAƒhdBasicConstraintshdtypedefdtruea¦dBasicConstraintshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea§dcAhdtypelhdtagd UNIVERSALadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhd UNIVERSALajhd ComponentTypea¨dpathLenConstrainthdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnodOPTIONALlhd UNIVERSALajjjjdno·bWLAƒhdPresentationAddresshdtypedefdtruebdPresentationAddresshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebd pSelectorhdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnodOPTIONALlhdCONTEXTajhd ComponentTypebd sSelectorhdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnodOPTIONALlhdCONTEXTajhd ComponentTypebd tSelectorhdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnodOPTIONALlhdCONTEXTajhd ComponentTypebd nAddresseshdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITa jhdSET OFhdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnolhdSizeConstrainthadMAXjjdnod mandatorylhdCONTEXTajjjjdno½bWLAƒhdLocalPostalAttributeshdtypedefdtruebdLocalPostalAttributeshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXd PDSParameterjjdno»bWLAƒhdPosteRestanteAddresshdtypedefdtruebdPosteRestanteAddresshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXd PDSParameterjjdno[bWLAƒhdbasicConstraintshdtypedefdtrueb€dbasicConstraintshdObjecthdExternaltypereferenceb€dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea¤did-ce-basicConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb‚dOTP-PKIXdBasicConstraintsjlbWLAƒhdSIGNATURE-ALGORITHM-CLASShdclassdefdtruebdSIGNATURE-ALGORITHM-CLASShd objectclasslhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnodUNIQUEd MANDATORYhd typefielddTypedOPTIONALjhd WITH SYNTAXldIDhdvaluefieldreferencedidldTYPEhdtypefieldreferencedTypejjábWLAƒhd ClassListhdtypedefdtrueažd ClassListhdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGlhdunmarkedahd unclassifiedahd restrictedahd confidentialahdsecretahd topSecretajjjdnoôbWLAƒhd DisplayTexthdtypedefdtrueald DisplayTexthdtypejhdCHOICElhd ComponentTypeamd ia5Stringhdtypelhdtagd UNIVERSALadIMPLICITajd IA5StringlhdSizeConstrainthaaÈjjdnod mandatorylhd UNIVERSALajhd ComponentTypeand visibleStringhdtypelhdtagd UNIVERSALadIMPLICITajd VisibleStringlhdSizeConstrainthaaÈjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaod bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaaÈjjdnod mandatorylhd UNIVERSALajhd ComponentTypeapd utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaaÈjjdnod mandatorylhd UNIVERSALa jjjjdnoƒbWLAƒhd CertPolicyIdhdtypedefdtrueaRd CertPolicyIdhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnoVbWLAƒhdid-athdvaluedefdtrueaNdid-athdtypejdOBJECT IDENTIFIERjjdnohaaa`bWLAƒhdid-qthdvaluedefdtruea#did-qthdtypejdOBJECT IDENTIFIERjjdnohaaaaaaaa¶bWLAƒhdTeletexOrganizationNamehdtypedefdtrueb«dTeletexOrganizationNamehdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa@jjdnoõbWLAƒhdTBSCertificatehdtypedefdtrueaôdTBSCertificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalsel hd ComponentTypeaõdversionhdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITajhdINTEGERlhdv1ahdv2ahdv3ajjjdnohdDEFAULTalhdCONTEXTajhd ComponentTypeaöd serialNumberhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea÷d signaturehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea÷dOTP-PKIXdAlgorithmIdentifierjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaødissuerhdtypejhdExternaltypereferenceaødOTP-PKIXdNamejjdnod mandatorylhd UNIVERSALajhd ComponentTypeaùdvalidityhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaùdOTP-PKIXdValidityjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaúdsubjecthdtypejhdExternaltypereferenceaúdOTP-PKIXdNamejjdnod mandatorylhd UNIVERSALajhd ComponentTypeaûdsubjectPublicKeyInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaûdOTP-PKIXdSubjectPublicKeyInfojjdnod mandatorylhd UNIVERSALajhd ComponentTypeaüdissuerUniqueIDhdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGjjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaþdsubjectUniqueIDhdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGjjjdnodOPTIONALlhdCONTEXTajhd ComponentTypebd extensionshdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXd ExtensionsjjdnodOPTIONALlhdCONTEXTajjjjdnoºbWLAƒhdX520namehdtypedefdtrueaXdX520namehdtypejhdCHOICElhd ComponentTypeaYd teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthab€jjdnod mandatorylhd UNIVERSALajhd ComponentTypeaZdprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthab€jjdnod mandatorylhd UNIVERSALajhd ComponentTypea[duniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthab€jjdnod mandatorylhd UNIVERSALajhd ComponentTypea\d utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthab€jjdnod mandatorylhd UNIVERSALa jhd ComponentTypea]d bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthab€jjdnod mandatorylhd UNIVERSALajjjjdnoôbWLAƒhdSSLTBSCertificatehdtypedefdtruea€dSSLTBSCertificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalsel hd ComponentTypeadversionhdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITajhdINTEGERlhdv1ahdv2ahdv3ajjjdnohdDEFAULTalhdCONTEXTajhd ComponentTypea‚d serialNumberhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaƒd signaturehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaƒdOTP-PKIXdSignatureAlgorithmjjdnod mandatorylhd UNIVERSALajhd ComponentTypea„dissuerhdtypejhdExternaltypereferencea„dOTP-PKIXdNamejjdnod mandatorylhd UNIVERSALajhd ComponentTypea…dvalidityhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea…dOTP-PKIXdValidityjjdnod mandatorylhd UNIVERSALajhd ComponentTypea†dsubjecthdtypejhdExternaltypereferencea†dOTP-PKIXdNamejjdnod mandatorylhd UNIVERSALajhd ComponentTypea‡dsubjectPublicKeyInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea‡dOTP-PKIXdSubjectPublicKeyInfojjdnod mandatorylhd UNIVERSALajhd ComponentTypeaˆdissuerUniqueIDhdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGjjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaŠdsubjectUniqueIDhdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGjjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaŒd extensionshdtypelhdtagdCONTEXTadEXPLICITa hdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaŒdOTP-PKIXd ExtensionsjjdnodOPTIONALlhdCONTEXTajjjjdno™bWLAƒhdSSLCertificatehdtypedefdtruea{dSSLCertificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea|dtbsCertificatehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea|dOTP-PKIXdTBSCertificatejjdnod mandatorylhd UNIVERSALajhd ComponentTypea}dsignatureAlgorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea}dOTP-PKIXdSignatureAlgorithmjjdnod mandatorylhd UNIVERSALajhd ComponentTypea~d signaturehdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnod mandatorylhd UNIVERSALajjjjdnokbWLAƒhdub-emailaddress-lengthhdvaluedefdtruebFdub-emailaddress-lengthhdtypejdINTEGERjjdnoa€obWLAƒhdCPSurihdtypedefdtruea`dCPSurihdtypelhdtagd UNIVERSALadIMPLICITajd IA5StringjjdnobWLAƒhd Extension-AnyhdtypedefdtruebMd Extension-Anyhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebNdextnIDhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypebOdcriticalhdtypelhdtagd UNIVERSALadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhd UNIVERSALajhd ComponentTypebPd extnValuehdtypejdASN1_OPEN_TYPEjjdnod mandatoryjjjjdno¢bWLAƒhdV2FormhdtypedefdtrueaadV2Formhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeabd issuerNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceabdOTP-PKIXd GeneralNamesjjdnodOPTIONALlhd UNIVERSALajhd ComponentTypeacdbaseCertificateIDhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceacdOTP-PKIXd IssuerSerialjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaddobjectDigestInfohdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaddOTP-PKIXdObjectDigestInfojjdnodOPTIONALlhdCONTEXTajjjjdnotbWLAƒhd rsaEncryptionhdvaluedefdtrueaCd rsaEncryptionhdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaawbWLAƒhdholdInstructionhdvaluedefdtruebIdholdInstructionhdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aŠbWLAƒhdid-aca-authenticationInfohdvaluedefdtruea!did-aca-authenticationInfohdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa aÅbWLAƒhdSSLCharacteristic-twohdtypedefdtrueb”dSSLCharacteristic-twohdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedCharacteristicTwosdbasisadiddidjlhd ComponentTypeb•dmhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb–dbasishdtypelhdtagd UNIVERSALadIMPLICITajhdObjectClassFieldTypehdExternaltypereferenceb–dSSL-PKIXdCHARACTERISTIC-TWO-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhd simpletabledSupportedCharacteristicTwosjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb—d parametershdtypejhdObjectClassFieldTypehdExternaltypereferenceb—dSSL-PKIXdCHARACTERISTIC-TWO-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetb˜hdExternaltypereferenceb˜dOTP-PKIXdSupportedCharacteristicTwoslhd outermostlhdExternalvaluereferenceb˜dSSL-PKIXdbasisjjjlhdobjfunhdExternaltypereferenceb˜dOTP-PKIXdSupportedCharacteristicTwosjdnod mandatoryjjjjdnolbWLAƒhd id-ad-ocsphdvaluedefdtruea3d id-ad-ocsphdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa0aqbWLAƒhd prime256v1hdvaluedefdtruebd prime256v1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaqbWLAƒhd prime239v1hdvaluedefdtrueb d prime239v1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaqbWLAƒhd prime192v1hdvaluedefdtrueb d prime192v1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaadbWLAƒhdid-dsahdvaluedefdtruea!did-dsahdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aabbWLAƒhdid-acahdvaluedefdtruea did-acahdtypejdOBJECT IDENTIFIERjjdnohaaaaaaaa ŠbWLAƒhddsahdtypedefdtrueb.ddsahdObjecthdExternaltypereferenceb.dOTP-PKIXdPUBLIC-KEY-ALGORITHM-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea!did-dsahdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aahdTypehdExternaltypereferenceb0dOTP-PKIXd Dss-Parmshd PublicKeyTypehdExternaltypereferenceb1dOTP-PKIXd DSAPublicKeyjqbWLAƒhd prime239v2hdvaluedefdtruebd prime239v2hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaqbWLAƒhd prime192v2hdvaluedefdtrueb d prime192v2hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaatbWLAƒhddhpublicnumberhdvaluedefdtruea[ddhpublicnumberhdtypejdOBJECT IDENTIFIERjjdnohaabHb'>aaŒbWLAƒhdgenerationQualifierhdtypedefdtruea¶dgenerationQualifierhdObjecthdExternaltypereferencea¶dOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaVdid-at-generationQualifierhdtypejhdExternaltypereferenceaVdPKIX1Explicit88d AttributeTypejjdnohaaaa,hdTypehdExternaltypereferencea¸dOTP-PKIXdX520namejqbWLAƒhd prime239v3hdvaluedefdtruebd prime239v3hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaqbWLAƒhd prime192v3hdvaluedefdtrueb d prime192v3hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaa%bWLAƒhd AAControlshdtypedefdtruea¬d AAControlshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea­dpathLenConstrainthdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnodOPTIONALlhd UNIVERSALajhd ComponentTypea®dpermittedAttrshdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea®dOTP-PKIXdAttrSpecjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea¯d excludedAttrshdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea¯dOTP-PKIXdAttrSpecjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea°dpermitUnSpecifiedhdtypelhdtagd UNIVERSALadIMPLICITajdBOOLEANjjdnohdDEFAULTdtruelhd UNIVERSALajjjjdnobWLAƒhdid-pe-authorityInfoAccesshdvaluedefdtruebdid-pe-authorityInfoAccesshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa‘bWLAƒhd SkipCertshdtypedefdtrueaÃd SkipCertshdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnobWLAƒhdNameConstraintshdtypedefdtruea®dNameConstraintshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea¯dpermittedSubtreeshdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea¯dOTP-PKIXdGeneralSubtreesjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea°dexcludedSubtreeshdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea°dOTP-PKIXdGeneralSubtreesjjdnodOPTIONALlhdCONTEXTajjjjdnokbWLAƒhdposte-restante-addresshdvaluedefdtruebþdposte-restante-addresshdtypejdINTEGERjjdnoabWLAƒhd!teletex-organizational-unit-nameshdvaluedefdtrueb»d!teletex-organizational-unit-nameshdtypejdINTEGERjjdnoaWbWLAƒhdnameConstraintshdtypedefdtrueb„dnameConstraintshdObjecthdExternaltypereferenceb„dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea¬did-ce-nameConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb†dOTP-PKIXdNameConstraintsjtbWLAƒhdx400-local-postal-attributeshdtypedefdtrueb'dx400-local-postal-attributeshdObjecthdExternaltypereferenceb'dOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebdlocal-postal-attributeshdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb)dOTP-PKIXdLocalPostalAttributesjgbWLAƒhdFieldIDhdtypedefdtruea~dFieldIDhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypead fieldTypehdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea€d parametershdtypejdASN1_OPEN_TYPEjjdnod mandatoryjjjjdno~bWLAƒhd KEA-Parms-Idhdtypedefdtrueaud KEA-Parms-Idhdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdno„bWLAƒhdid-ce-privateKeyUsagePeriodhdvaluedefdtruea>did-ce-privateKeyUsagePeriodhdtypejdOBJECT IDENTIFIERjjdnohaaaanbWLAƒhd id-fieldTypehdvaluedefdtruea“d id-fieldTypehdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aÞbWLAƒhdDistributionPointNamehdtypedefdtrueaÐdDistributionPointNamehdtypejhdCHOICElhd ComponentTypeaÑdfullNamehdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaÑdOTP-PKIXd GeneralNamesjjdnod mandatorylhdCONTEXTajhd ComponentTypeaÒdnameRelativeToCRLIssuerhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaÒdOTP-PKIXdRelativeDistinguishedNamejjdnod mandatorylhdCONTEXTajjjjdno¡bWLAƒhd AnotherNamehdtypedefdtruead AnotherNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea‘dtype-idhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea’dvaluehdtypelhdtagdCONTEXTadEXPLICITa jdASN1_OPEN_TYPEjjdnod mandatorylhdCONTEXTajjjjdnoVbWLAƒhdid-cehdvaluedefdtrueadid-cehdtypejdOBJECT IDENTIFIERjjdnohaaaObWLAƒhdub-titlehdvaluedefdtruebCdub-titlehdtypejdINTEGERjjdnoa@³bWLAƒhdUniquePostalNamehdtypedefdtruebdUniquePostalNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXd PDSParameterjjdnoÓbWLAƒhd PhysicalDeliveryOrganizationNamehdtypedefdtruebçd PhysicalDeliveryOrganizationNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebçdOTP-PKIXd PDSParameterjjdno|bWLAƒhdid-ad-timeStampinghdvaluedefdtruea5did-ad-timeStampinghdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa0atbWLAƒhdid-ecPublicKeyhdvaluedefdtrueaêdid-ecPublicKeyhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aa:bWLAƒhd RSAPrivateKeyhdtypedefdtruead RSAPrivateKeyhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalsel hd ComponentTypeadversionhdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhd two-primeahdmultiajlhdconstrained_byjjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadmodulushdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadpublicExponenthdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadprivateExponenthdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadprime1hdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadprime2hdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypead exponent1hdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypead exponent2hdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypead coefficienthdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadotherPrimeInfoshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceadOTP-PKIXdOtherPrimeInfosjjdnodOPTIONALlhd UNIVERSALajjjjdnoøbWLAƒhdSubjectPublicKeyInfohdtypedefdtruebdSubjectPublicKeyInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebd algorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXdAlgorithmIdentifierjjdnod mandatorylhd UNIVERSALajhd ComponentTypebdsubjectPublicKeyhdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnod mandatorylhd UNIVERSALajjjjdnoBbWLAƒhdSSLSubjectPublicKeyInfohdtypedefdtrueaîdSSLSubjectPublicKeyInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedPublicKeyAlgorithmsd algorithmadiddidlhadalgojlhd ComponentTypeaïd algorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedPublicKeyAlgorithmsdalgoadiddidjlhd ComponentTypeaðdalgohdtypelhdtagd UNIVERSALadIMPLICITajhdObjectClassFieldTypehdExternaltypereferenceaðdSSL-PKIXdPUBLIC-KEY-ALGORITHM-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhd simpletabledSupportedPublicKeyAlgorithmsjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaòd parametershdtypejhdObjectClassFieldTypehdExternaltypereferenceaòdSSL-PKIXdPUBLIC-KEY-ALGORITHM-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetaóhdExternaltypereferenceaódOTP-PKIXdSupportedPublicKeyAlgorithmslhd innermostlhdExternalvaluereferenceaódSSL-PKIXdalgojjjlhdobjfunhdExternaltypereferenceaódOTP-PKIXdSupportedPublicKeyAlgorithmsjdnodOPTIONALjjjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaödsubjectPublicKeyhdtypejhdObjectClassFieldTypehdExternaltypereferenceaödSSL-PKIXdPUBLIC-KEY-ALGORITHM-CLASSjhd PublicKeyTypejhd typefieldd PublicKeyTypelhdcomponentrelationhd objectseta÷hdExternaltypereferencea÷dOTP-PKIXdSupportedPublicKeyAlgorithmslhd outermostlhdExternalvaluereferencea÷dSSL-PKIXd algorithmhdExternalvaluereferencea÷dSSL-PKIXdalgojjjlhdobjfunhdExternaltypereferencea÷dOTP-PKIXdSupportedPublicKeyAlgorithmsjdnod mandatoryjjjjdno‚bWLAƒhdid-ce-subjectKeyIdentifierhdvaluedefdtruea)did-ce-subjectKeyIdentifierhdtypejdOBJECT IDENTIFIERjjdnohaaaa%bWLAƒhdEcpkParametershdtypedefdtrueaÔdEcpkParametershdtypejhdCHOICElhd ComponentTypeaÕd ecParametershdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaÕdOTP-PKIXd ECParametersjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÖd namedCurvehdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea×d implicitlyCAhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnod mandatorylhd UNIVERSALajjjjdnobWLAƒhdGeneralSubtreeshdtypedefdtruea²dGeneralSubtreeshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea²dOTP-PKIXdGeneralSubtreejjdnolhdSizeConstrainthadMAXjjdno2bWLAƒhdPolicyMappingshdtypedefdtrueavdPolicyMappingshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeawdissuerDomainPolicyhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaxdsubjectDomainPolicyhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajjjjdnolhdSizeConstrainthadMAXjjdnombWLAƒhdub-organizational-unitshdvaluedefdtruebXdub-organizational-unitshdtypejdINTEGERjjdnoambWLAƒhdlocal-postal-attributeshdvaluedefdtruebdlocal-postal-attributeshdtypejdINTEGERjjdnoa{bWLAƒhdUnformattedPostalAddresshdtypedefdtruebïdUnformattedPostalAddresshdtypelhdtagd UNIVERSALadIMPLICITa jhdSETdfalsedtruedfalselhd ComponentTypebðdprintable-addresshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnolhdSizeConstrainthaajjdnodOPTIONALlhd UNIVERSALajhd ComponentTypebódteletex-stringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa´jjdnodOPTIONALlhd UNIVERSALajjjjdnosbWLAƒhdunformatted-postal-addresshdvaluedefdtruebídunformatted-postal-addresshdtypejdINTEGERjjdnoa$bWLAƒhdExtensionAttributeshdtypedefdtrueb–dExtensionAttributeshdtypelhdtagd UNIVERSALadIMPLICITa jhdSET OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb—dOTP-PKIXdExtensionAttributejjdnolhdSizeConstrainthabjjdno™bWLAƒhd EmailAddresshdtypedefdtrueaÖd EmailAddresshdtypelhdtagd UNIVERSALadIMPLICITajd IA5StringlhdSizeConstrainthaa€jjdnovbWLAƒhdid-ad-caIssuershdvaluedefdtruea4did-ad-caIssuershdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa0aSbWLAƒhdpolicyMappingshdtypedefdtruebpdpolicyMappingshdObjecthdExternaltypereferencebpdOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueatdid-ce-policyMappingshdtypejdOBJECT IDENTIFIERjjdnohaaaa!hdTypehdExternaltypereferencebrdOTP-PKIXdPolicyMappingsjbWLAƒhd SSLExtensionshdtypedefdtrueb9d SSLExtensionshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb9dOTP-PKIXd ExtensionjjdnolhdSizeConstrainthadMAXjjdno]bWLAƒhdEXTENSION-ATTRIBUTE-CLASShdclassdefdtrueb¸dEXTENSION-ATTRIBUTE-CLASShd objectclasslhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnodUNIQUEd MANDATORYhd typefielddTyped MANDATORYjhd WITH SYNTAXldIDhdvaluefieldreferencediddTYPEhdtypefieldreferencedTypej„bWLAƒhd emailAddresshdtypedefdtrueaæd emailAddresshdObjecthdExternaltypereferenceaædOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaÔdid-emailAddresshdtypejhdExternaltypereferenceaÔdPKIX1Explicit88d AttributeTypejjdnohaabHb»aa ahdTypehdExternaltypereferenceaèdOTP-PKIXd EmailAddressj[bWLAƒhdub-common-namehdvaluedefdtrueb>dub-common-namehdtypejdINTEGERjjdnoa@ÚbWLAƒhdPhysicalDeliveryCountryNamehdtypedefdtruebÉdPhysicalDeliveryCountryNamehdtypejhdCHOICElhd ComponentTypebÊd x121-dcc-codehdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstraintajjdnod mandatorylhd UNIVERSALajhd ComponentTypebÌdiso-3166-alpha2-codehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstraintajjdnod mandatorylhd UNIVERSALajjjjdnoebWLAƒhdteletex-common-namehdvaluedefdtrueb¥dteletex-common-namehdtypejdINTEGERjjdnoa­bWLAƒhd X520Titlehdtypedefdtruea¤d X520TitlehdtypejhdCHOICElhd ComponentTypea¥d teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea¦dprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea§duniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea¨d utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALa jhd ComponentTypea©d bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajjjjdnoŽbWLAƒhd id-at-titlehdvaluedefdtruea¢d id-at-titlehdtypejhdExternaltypereferencea¢dPKIX1Explicit88d AttributeTypejjdnohaaaa ·bWLAƒhdX520CommonNamehdtypedefdtrueacdX520CommonNamehdtypejhdCHOICElhd ComponentTypeadd teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypeaedprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypeafduniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypeagd utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALa jhd ComponentTypeahd bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajjjjdnoébWLAƒhd RoleSyntaxhdtypedefdtruea’d RoleSyntaxhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea“d roleAuthorityhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea“dOTP-PKIXd GeneralNamesjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea”droleNamehdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferencea”dOTP-PKIXd GeneralNamejjdnod mandatorylhdCONTEXTajjjjdnoubWLAƒhdub-organization-name-lengthhdvaluedefdtruebVdub-organization-name-lengthhdtypejdINTEGERjjdnoa@³bWLAƒhdVersionPKIX1Explicit88hdtypedefdtruebdVersionPKIX1Explicit88hdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhdv1ahdv2ahdv3ajjjdno–bWLAƒhddhhdtypedefdtrueb[ddhhdObjecthdExternaltypereferenceb[dOTP-PKIXdPUBLIC-KEY-ALGORITHM-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea[ddhpublicnumberhdtypejdOBJECT IDENTIFIERjjdnohaabHb'>aahdTypehdExternaltypereferenceb]dOTP-PKIXdDomainParametershd PublicKeyTypehdExternaltypereferenceb^dOTP-PKIXd DHPublicKeyj¤bWLAƒhdSecurityCategoryhdtypedefdtruea§dSecurityCategoryhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea¨dtypehdtypelhdtagdCONTEXTadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhdCONTEXTajhd ComponentTypea©dvaluehdtypelhdtagdCONTEXTadEXPLICITa jdASN1_OPEN_TYPEjjdnod mandatorylhdCONTEXTajjjjdno½bWLAƒhdSSLSubjectPublicKeyInfo-AnyhdtypedefdtrueaûdSSLSubjectPublicKeyInfo-Anyhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaüd algorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaüdOTP-PKIXdPublicKeyAlgorithmjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaýdsubjectPublicKeyhdtypejdASN1_OPEN_TYPEjjdnod mandatoryjjjjdno:bWLAƒhd Extensionhdtypedefdtruebd Extensionhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebdextnIDhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypebdcriticalhdtypelhdtagd UNIVERSALadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhd UNIVERSALajhd ComponentTypebd extnValuehdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnod mandatorylhd UNIVERSALajjjjdno’bWLAƒhd SSLExtensionhdtypedefdtruebBd SSLExtensionhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedExtensionsdextnIDadiddidjlhd ComponentTypebCdextnIDhdtypelhdtagd UNIVERSALadIMPLICITajhdObjectClassFieldTypehdExternaltypereferencebCdSSL-PKIXdEXTENSION-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhd simpletabledSupportedExtensionsjjdnod mandatorylhd UNIVERSALajhd ComponentTypebDdcriticalhdtypelhdtagd UNIVERSALadIMPLICITajdBOOLEANjjdnohdDEFAULTdfalselhd UNIVERSALajhd ComponentTypebEd extnValuehdtypejhdObjectClassFieldTypehdExternaltypereferencebEdSSL-PKIXdEXTENSION-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetbEhdExternaltypereferencebEdOTP-PKIXdSupportedExtensionslhd outermostlhdExternalvaluereferencebEdSSL-PKIXdextnIDjjjlhdobjfunhdExternaltypereferencebEdOTP-PKIXdSupportedExtensionsjdnod mandatoryjjjjdno¢bWLAƒhdkeahdtypedefdtruebjdkeahdObjecthdExternaltypereferencebjdOTP-PKIXdPUBLIC-KEY-ALGORITHM-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueardid-keyExchangeAlgorithmhdtypejdOBJECT IDENTIFIERjjdnoh aabHaaeaaaahdTypehdExternaltypereferencebldOTP-PKIXd KEA-Parms-Idhd PublicKeyTypehdExternaltypereferencebmdOTP-PKIXd KEA-PublicKeyj”bWLAƒhd CRLNumberhdtypedefdtruebd CRLNumberhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnoªbWLAƒhdid-at-generationQualifierhdvaluedefdtrueaVdid-at-generationQualifierhdtypejhdExternaltypereferenceaVdPKIX1Explicit88d AttributeTypejjdnohaaaa,BbWLAƒhd cRLNumberhdtypedefdtrueb¤d cRLNumberhdObjecthdExternaltypereferenceb¤dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebdid-ce-cRLNumberhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb¦dOTP-PKIXd CRLNumberj„bWLAƒhdid-ce-cRLDistributionPointshdvaluedefdtrueaÇdid-ce-cRLDistributionPointshdtypejdOBJECT IDENTIFIERjjdnohaaaazbWLAƒhdid-ce-basicConstraintshdvaluedefdtruea¤did-ce-basicConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaa bWLAƒhdExtendedNetworkAddresshdtypedefdtruebdExtendedNetworkAddresshdtypejhdCHOICElhd ComponentTypebde163-4-addresshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebdnumberhdtypelhdtagdCONTEXTadIMPLICITajd NumericStringlhdSizeConstrainthaajjdnod mandatorylhdCONTEXTajhd ComponentTypebd sub-addresshdtypelhdtagdCONTEXTadIMPLICITajd NumericStringlhdSizeConstrainthaa(jjdnodOPTIONALlhdCONTEXTajjjjdnod mandatorylhd UNIVERSALajhd ComponentTypebd psap-addresshdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencebdOTP-PKIXdPresentationAddressjjdnod mandatorylhdCONTEXTajjjjdno+bWLAƒhdTeletexOrganizationalUnitNameshdtypedefdtrueb½dTeletexOrganizationalUnitNameshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa jjdnolhdSizeConstrainthaajjdnoLbWLAƒhdtp-basishdtypedefdtrueb¥dtp-basishdObjecthdExternaltypereferenceb¥dOTP-PKIXdCHARACTERISTIC-TWO-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea´dtpBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaahdTypehdExternaltypereferenceb§dOTP-PKIXd TrinomialjbWLAƒhdid-ce-issuingDistributionPointhdvaluedefdtruebdid-ce-issuingDistributionPointhdtypejdOBJECT IDENTIFIERjjdnohaaaabWLAƒhd Clearancehdtypedefdtruea—d Clearancehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea˜dpolicyIdhdtypelhdtagdCONTEXTadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhdCONTEXTajhd ComponentTypea™d classListhdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGlhdunmarkedahd unclassifiedahd restrictedahd confidentialahdsecretahd topSecretajjjdnohdDEFAULTld unclassifiedjlhdCONTEXTajhd ComponentTypeašdsecurityCategorieshdtypelhdtagdCONTEXTadIMPLICITa jhdSET OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea›dOTP-PKIXdSecurityCategoryjjdnojjdnodOPTIONALlhdCONTEXTajjjjdnoôbWLAƒhd EDIPartyNamehdtypedefdtruea”d EDIPartyNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea•d nameAssignerhdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferencea•dOTP-PKIXdDirectoryStringjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea–d partyNamehdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferencea–dOTP-PKIXdDirectoryStringjjdnod mandatorylhdCONTEXTajjjjdno»bWLAƒhdX520LocalityNamehdtypedefdtrueandX520LocalityNamehdtypejhdCHOICElhd ComponentTypeaod teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypeapdprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypeaqduniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypeard utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALa jhd ComponentTypeasd bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajjjjdno…bWLAƒhd AttributeTypehdtypedefdtruea?d AttributeTypehdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnorbWLAƒhd id-qt-unoticehdvaluedefdtruea.d id-qt-unoticehdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaabWLAƒhd#x400-physical-delivery-country-namehdtypedefdtruebòd#x400-physical-delivery-country-namehdObjecthdExternaltypereferencebòdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebÇdphysical-delivery-country-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebôdOTP-PKIXdPhysicalDeliveryCountryNamejcbWLAƒhdub-initials-lengthhdvaluedefdtruebSdub-initials-lengthhdtypejdINTEGERjjdnoa{bWLAƒhdub-generation-qualifier-lengthhdvaluedefdtruebQdub-generation-qualifier-lengthhdtypejdINTEGERjjdnoa†bWLAƒhdid-aca-chargingIdentityhdvaluedefdtruea#did-aca-chargingIdentityhdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa a|bWLAƒhdid-ad-caRepositoryhdvaluedefdtruea6did-ad-caRepositoryhdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaa0aLbWLAƒhd IssuerSerialhdtypedefdtrueajd IssuerSerialhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeakdissuerhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceakdOTP-PKIXd GeneralNamesjjdnod mandatorylhd UNIVERSALajhd ComponentTypealdserialhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeamd issuerUIDhdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnodOPTIONALlhd UNIVERSALajjjjdnoÅbWLAƒhdPolicyQualifierInfohdtypedefdtrueaTdPolicyQualifierInfohdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaUdpolicyQualifierIdhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERlhd SingleValuellhdid-qtajlhdid-qtajjjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaVd qualifierhdtypejdASN1_OPEN_TYPEjjdnod mandatoryjjjjdnoƒbWLAƒhdECPVerhdtypedefdtrueaádECPVerhdtypelhdtagd UNIVERSALadIMPLICITajhdINTEGERlhdecpVer1ajjjdnožbWLAƒhdHolderhdtypedefdtrueaDdHolderhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaEdbaseCertificateIDhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaEdOTP-PKIXd IssuerSerialjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaHd entityNamehdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaHdOTP-PKIXd GeneralNamesjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaJdobjectDigestInfohdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaJdOTP-PKIXdObjectDigestInfojjdnodOPTIONALlhdCONTEXTajjjjdnoµbWLAƒhdCertificateIssuerhdtypedefdtrueb=dCertificateIssuerhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb=dOTP-PKIXd GeneralNamesjjdno‡bWLAƒhdAlgorithmIdentifierhdtypedefdtrueb6dAlgorithmIdentifierhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeb7d algorithmhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb8d parametershdtypejdASN1_OPEN_TYPEjjdnodOPTIONALjjjjdnobbWLAƒhdcertificateIssuerhdtypedefdtrueb´dcertificateIssuerhdObjecthdExternaltypereferenceb´dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueb;did-ce-certificateIssuerhdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferenceb¶dOTP-PKIXdCertificateIssuerj¥bWLAƒhdValidationParmshdtypedefdtrueajdValidationParmshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeakdseedhdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnod mandatorylhd UNIVERSALajhd ComponentTypeald pgenCounterhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajjjjdno€bWLAƒhdid-ce-certificatePolicieshdvaluedefdtrueaGdid-ce-certificatePolicieshdtypejdOBJECT IDENTIFIERjjdnohaaaa bWLAƒhd ORAddresshdtypedefdtrueb?d ORAddresshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeb@dbuilt-in-standard-attributeshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb@dOTP-PKIXdBuiltInStandardAttributesjjdnod mandatorylhd UNIVERSALajhd ComponentTypebAd"built-in-domain-defined-attributeshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebBdOTP-PKIXdBuiltInDomainDefinedAttributesjjdnodOPTIONALlhd UNIVERSALajhd ComponentTypebDdextension-attributeshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebDdOTP-PKIXdExtensionAttributesjjdnodOPTIONALlhd UNIVERSALajjjjdno“bWLAƒhd$x400-extension-OR-address-componentshdtypedefdtruebd$x400-extension-OR-address-componentshdObjecthdExternaltypereferencebdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebÝdextension-OR-address-componentshdtypejdINTEGERjjdnoa hdTypehdExternaltypereferencebdOTP-PKIXdExtensionORAddressComponentsjŒbWLAƒhdSupportedCharacteristicTwoshdtypedefdtruebšdSupportedCharacteristicTwoshd ObjectSethdExternaltypereferencebšdOTP-PKIXdCHARACTERISTIC-TWO-CLASSdtruedidlhhdOTP-PKIXdgn-basishaabHb'=aaaalhdidhdvaluedefdtruea­dgnBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojhhdOTP-PKIXdpp-basishaabHb'=aaaalhdidhdvaluedefdtruea¾dppBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaahdTypehdExternaltypereferenceb«dOTP-PKIXd PentanomialjhhdOTP-PKIXdtp-basishaabHb'=aaaalhdidhdvaluedefdtruea´dtpBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaahdTypehdExternaltypereferenceb§dOTP-PKIXd TrinomialjjÅbWLAƒhdSupportedPublicKeyAlgorithmshdtypedefdtrueb'dSupportedPublicKeyAlgorithmshd ObjectSethdExternaltypereferenceb'dOTP-PKIXdPUBLIC-KEY-ALGORITHM-CLASSdtruedidlhhdOTP-PKIXddhhaabHb'>aalhdidhdvaluedefdtruea[ddhpublicnumberhdtypejdOBJECT IDENTIFIERjjdnohaabHb'>aahdTypehdExternaltypereferenceb]dOTP-PKIXdDomainParametershd PublicKeyTypehdExternaltypereferenceb^dOTP-PKIXd DHPublicKeyjhhdOTP-PKIXddsahaabHb'8aalhdidhdvaluedefdtruea!did-dsahdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aahdTypehdExternaltypereferenceb0dOTP-PKIXd Dss-Parmshd PublicKeyTypehdExternaltypereferenceb1dOTP-PKIXd DSAPublicKeyjhhdOTP-PKIXd ec-public-keyhaabHb'=aalhdidhdvaluedefdtrueaêdid-ecPublicKeyhdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdExternaltypereferenceb±dOTP-PKIXdEcpkParametershd PublicKeyTypehdExternaltypereferenceb²dOTP-PKIXdECPointjhhdOTP-PKIXdkeah aabHaaeaaaalhdidhdvaluedefdtrueardid-keyExchangeAlgorithmhdtypejdOBJECT IDENTIFIERjjdnoh aabHaaeaaaahdTypehdExternaltypereferencebldOTP-PKIXd KEA-Parms-Idhd PublicKeyTypehdExternaltypereferencebmdOTP-PKIXd KEA-PublicKeyjhhdOTP-PKIXdrsa-encryptionhaabHb»aaalhdidhdvaluedefdtrueaCd rsaEncryptionhdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnohd PublicKeyTypehdExternaltypereferencebSdOTP-PKIXd RSAPublicKeyjj~bWLAƒhd FieldElementhdtypedefdtrueaÌd FieldElementhdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnoSbWLAƒhdTargethdtypedefdtrueawdTargethdtypejhdCHOICElhd ComponentTypeaxd targetNamehdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferenceaxdOTP-PKIXd GeneralNamejjdnod mandatorylhdCONTEXTajhd ComponentTypeayd targetGrouphdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferenceaydOTP-PKIXd GeneralNamejjdnod mandatorylhdCONTEXTajhd ComponentTypeazd targetCerthdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceazdOTP-PKIXd TargetCertjjdnod mandatorylhdCONTEXTajjjjdnoobWLAƒhd primeCurvehdvaluedefdtruebd primeCurvehdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aa bWLAƒhdCurvehdtypedefdtrueaãdCurvehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaädahdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaådbhdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaædseedhdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnodOPTIONALlhd UNIVERSALajjjjdnonbWLAƒhdid-at-clearancehdvaluedefdtruea)did-at-clearancehdtypejdOBJECT IDENTIFIERjjdnohaaaaa7.bWLAƒhdKeyUsagehdtypedefdtruea1dKeyUsagehdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGl hddigitalSignatureahdnonRepudiationahdkeyEnciphermentahddataEnciphermentahd keyAgreementahd keyCertSignahdcRLSignahd encipherOnlyahd decipherOnlyajjjdnoYbWLAƒhd ub-state-namehdvaluedefdtrueb@d ub-state-namehdtypejdINTEGERjjdnoa€½bWLAƒhdPrivateDomainNamehdtypedefdtruebjdPrivateDomainNamehdtypejhdCHOICElhd ComponentTypebkdnumerichdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstrainthaajjdnod mandatorylhd UNIVERSALajhd ComponentTypebld printablehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnod mandatorylhd UNIVERSALajjjjdno bWLAƒhdAttributeTypeAndValuehdtypedefdtrueaCdAttributeTypeAndValuehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaDdtypehdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaEdvaluehdtypejhdExternaltypereferenceaEdOTP-PKIXdAttributeValuejjdnod mandatoryjjjjdnoMbWLAƒhd extKeyUsagehdtypedefdtruebd extKeyUsagehdObjecthdExternaltypereferencebdOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaádid-ce-extKeyUsagehdtypejdOBJECT IDENTIFIERjjdnohaaaa%hdTypehdExternaltypereferenceb’dOTP-PKIXdExtKeyUsageSyntaxj;bWLAƒhdkeyUsagehdtypedefdtruebddkeyUsagehdObjecthdExternaltypereferencebddOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea/did-ce-keyUsagehdtypejdOBJECT IDENTIFIERjjdnohaaaahdTypehdExternaltypereferencebfdOTP-PKIXdKeyUsagej¶bWLAƒhdSSLExtensionAttributehdtypedefdtruebÃdSSLExtensionAttributehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedExtensionAttributesdextensionAttributeTypeadiddidjlhd ComponentTypebÄdextensionAttributeTypehdtypelhdtagdCONTEXTadIMPLICITajhdObjectClassFieldTypehdExternaltypereferencebÄdSSL-PKIXdEXTENSION-ATTRIBUTE-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnolhd simpletabledSupportedExtensionAttributesjjdnod mandatorylhdCONTEXTajhd ComponentTypebÆdextensionAttributeValuehdtypelhdtagdCONTEXTadEXPLICITa jhdObjectClassFieldTypehdExternaltypereferencebÆdSSL-PKIXdEXTENSION-ATTRIBUTE-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetbÇhdExternaltypereferencebÇdOTP-PKIXdSupportedExtensionAttributeslhd outermostlhdExternalvaluereferencebÇdSSL-PKIXdextensionAttributeTypejjjlhdobjfunhdExternaltypereferencebÇdOTP-PKIXdSupportedExtensionAttributesjdnod mandatorylhdCONTEXTajjjjdno›bWLAƒhdstateOrProvinceNamehdtypedefdtrueaÂdstateOrProvinceNamehdObjecthdExternaltypereferenceaÂdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueawdid-at-stateOrProvinceNamehdtypejhdExternaltypereferenceawdPKIX1Explicit88d AttributeTypejjdnohaaaahdTypehdExternaltypereferenceaÄdOTP-PKIXdX520StateOrProvinceNamejDbWLAƒhdSSLAttributeTypeAndValuehdtypedefdtrueašdSSLAttributeTypeAndValuehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedAttributeTypeAndValuesdtypeadiddidjlhd ComponentTypea›dtypehdtypelhdtagd UNIVERSALadIMPLICITajhdObjectClassFieldTypehdExternaltypereferencea›dSSL-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhd simpletabledSupportedAttributeTypeAndValuesjjdnod mandatorylhd UNIVERSALajhd ComponentTypeadvaluehdtypejhdObjectClassFieldTypehdExternaltypereferenceadSSL-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetažhdExternaltypereferenceaždOTP-PKIXdSupportedAttributeTypeAndValueslhd outermostlhdExternalvaluereferenceaždSSL-PKIXdtypejjjlhdobjfunhdExternaltypereferenceaždOTP-PKIXdSupportedAttributeTypeAndValuesjdnod mandatoryjjjjdnozbWLAƒhdid-kp-codeSigninghdvaluedefdtrueaðdid-kp-codeSigninghdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa‡bWLAƒhdIetfAttrSyntaxhdtypedefdtrueaƒdIetfAttrSyntaxhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea„dpolicyAuthorityhdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea„dOTP-PKIXd GeneralNamesjjdnodOPTIONALlhdCONTEXTajhd ComponentTypea…dvalueshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypejhdCHOICElhd ComponentTypea†doctetshdtypelhdtagd UNIVERSALadIMPLICITajd OCTET STRINGjjdnod mandatorylhd UNIVERSALajhd ComponentTypea‡doidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaˆdstringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8Stringjjdnod mandatorylhd UNIVERSALa jjjjdnojjdnod mandatorylhd UNIVERSALajjjjdnoibWLAƒhdub-postal-code-lengthhdvaluedefdtrueb\dub-postal-code-lengthhdtypejdINTEGERjjdnoa„bWLAƒhdsha1WithRSAEncryptionhdvaluedefdtrueaOdsha1WithRSAEncryptionhdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaa[bWLAƒhdPolicyInformationhdtypedefdtrueaMdPolicyInformationhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaNdpolicyIdentifierhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaOdpolicyQualifiershdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaPdOTP-PKIXdPolicyQualifierInfojjdnolhdSizeConstrainthadMAXjjdnodOPTIONALlhd UNIVERSALajjjjdnoqbWLAƒhd c2pnb368w1hdvaluedefdtruebd c2pnb368w1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaqbWLAƒhd c2pnb304w1hdvaluedefdtruebd c2pnb304w1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaqbWLAƒhd c2pnb272w1hdvaluedefdtruebd c2pnb272w1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaanbWLAƒhd c2pnb208w1hdvaluedefdtrueaüd c2pnb208w1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaa nbWLAƒhd c2pnb176w1hdvaluedefdtrueaöd c2pnb176w1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaavbWLAƒhdecdsa-with-SHA1hdvaluedefdtrueaˆdecdsa-with-SHA1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaœbWLAƒhdecdsa-with-sha1hdtypedefdtruebwdecdsa-with-sha1hdObjecthdExternaltypereferencebwdOTP-PKIXdSIGNATURE-ALGORITHM-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaˆdecdsa-with-SHA1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojœbWLAƒhdid-at-serialNumberhdvaluedefdtruea¹did-at-serialNumberhdtypejhdExternaltypereferencea¹dPKIX1Explicit88d AttributeTypejjdnohaaaaxbWLAƒhdid-pe-aaControlshdvaluedefdtrueadid-pe-aaControlshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaa»bWLAƒhdPostOfficeBoxAddresshdtypedefdtruebüdPostOfficeBoxAddresshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebüdOTP-PKIXd PDSParameterjjdno¢bWLAƒhdid-emailAddresshdvaluedefdtrueaÔdid-emailAddresshdtypejhdExternaltypereferenceaÔdPKIX1Explicit88d AttributeTypejjdnohaabHb»aa a€bWLAƒhdx400-unformatted-postal-addresshdtypedefdtruebdx400-unformatted-postal-addresshdObjecthdExternaltypereferencebdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebídunformatted-postal-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebdOTP-PKIXdUnformattedPostalAddressjŽbWLAƒhdSupportedSignatureAlgorithmshdtypedefdtrueb"dSupportedSignatureAlgorithmshd ObjectSethdExternaltypereferenceb"dOTP-PKIXdSIGNATURE-ALGORITHM-CLASSdtruedidlhhdOTP-PKIXd dsa-with-sha1haabHb'8aalhdidhdvaluedefdtruea/did-dsa-with-sha1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojhhdOTP-PKIXdmd2-with-rsa-encryptionhaabHb»aaalhdidhdvaluedefdtrueaGdmd2WithRSAEncryptionhdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojhhdOTP-PKIXdmd5-with-rsa-encryptionhaabHb»aaalhdidhdvaluedefdtrueaKdmd5WithRSAEncryptionhdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojhhdOTP-PKIXdsha1-with-rsa-encryptionhaabHb»aaalhdidhdvaluedefdtrueaOdsha1WithRSAEncryptionhdtypejdOBJECT IDENTIFIERjjdnohaabHb»aaahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojhhdOTP-PKIXdecdsa-with-sha1haabHb'=aalhdidhdvaluedefdtrueaˆdecdsa-with-SHA1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojjÿbWLAƒhd SSLFieldIDhdtypedefdtrueb‚d SSLFieldIDhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsehdsimpletableattributesdSupportedFieldIdsd fieldTypeadiddidjlhd ComponentTypebƒd fieldTypehdtypelhdtagd UNIVERSALadIMPLICITajhdObjectClassFieldTypehdExternaltypereferencebƒdSSL-PKIXdFIELD-ID-CLASSjhdidjhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnolhd simpletabledSupportedFieldIdsjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb„d parametershdtypejhdObjectClassFieldTypehdExternaltypereferenceb„dSSL-PKIXdFIELD-ID-CLASSjhdTypejhd typefielddTypelhdcomponentrelationhd objectsetb„hdExternaltypereferenceb„dOTP-PKIXdSupportedFieldIdslhd outermostlhdExternalvaluereferenceb„dSSL-PKIXd fieldTypejjjlhdobjfunhdExternaltypereferenceb„dOTP-PKIXdSupportedFieldIdsjdnod mandatoryjjjjdno bWLAƒhdBuiltInDomainDefinedAttributehdtypedefdtruebŽdBuiltInDomainDefinedAttributehdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebdtypehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnod mandatorylhd UNIVERSALajhd ComponentTypeb‘dvaluehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajjjjdno°bWLAƒhdid-at-organizationalUnitNamehdvaluedefdtruea’did-at-organizationalUnitNamehdtypejhdExternaltypereferencea’dPKIX1Explicit88d AttributeTypejjdnohaaaa ÃbWLAƒhdX520OrganizationNamehdtypedefdtruea„dX520OrganizationNamehdtypejhdCHOICElhd ComponentTypea…d teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea‡dprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea‰duniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajhd ComponentTypea‹d utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALa jhd ComponentTypead bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaa@jjdnod mandatorylhd UNIVERSALajjjjdno|bWLAƒhdid-kp-timeStampinghdvaluedefdtrueaòdid-kp-timeStampinghdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaaÍbWLAƒhdDirectoryStringhdtypedefdtrueaædDirectoryStringhdtypejhdCHOICElhd ComponentTypeaçd teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthadMAXjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaèdprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthadMAXjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaéduniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthadMAXjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaêd utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthadMAXjjdnod mandatorylhd UNIVERSALa jhd ComponentTypeaëd bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthadMAXjjdnod mandatorylhd UNIVERSALajjjjdnokbWLAƒhdub-x121-address-lengthhdvaluedefdtruebadub-x121-address-lengthhdtypejdINTEGERjjdnoaybWLAƒhdub-unformatted-address-lengthhdvaluedefdtrueb`dub-unformatted-address-lengthhdtypejdINTEGERjjdnoa´ƒbWLAƒhd"ub-organizational-unit-name-lengthhdvaluedefdtruebWd"ub-organizational-unit-name-lengthhdtypejdINTEGERjjdnoa gbWLAƒhdub-given-name-lengthhdvaluedefdtruebRdub-given-name-lengthhdtypejdINTEGERjjdnoa{bWLAƒhdub-country-name-numeric-lengthhdvaluedefdtruebIdub-country-name-numeric-lengthhdtypejdINTEGERjjdnoaibWLAƒhdub-common-name-lengthhdvaluedefdtruebGdub-common-name-lengthhdtypejdINTEGERjjdnoa@ bWLAƒhd PentanomialhdtypedefdtrueaÄd Pentanomialhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaÅdk1hdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÆdk2hdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypeaÇdk3hdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajjjjdnoqbWLAƒhd c2tnb431r1hdvaluedefdtruebd c2tnb431r1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaanbWLAƒhd c2pnb163v1hdvaluedefdtrueaód c2pnb163v1hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaanbWLAƒhd c2pnb163v2hdvaluedefdtrueaôd c2pnb163v2hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaobWLAƒhdid-ce-cRLNumberhdvaluedefdtruebdid-ce-cRLNumberhdtypejdOBJECT IDENTIFIERjjdnohaaaanbWLAƒhd c2pnb163v3hdvaluedefdtrueaõd c2pnb163v3hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaabWLAƒhd Dss-Parmshdtypedefdtruea(d Dss-Parmshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypea)dphdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea*dqhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajhd ComponentTypea+dghdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnod mandatorylhd UNIVERSALajjjjdno¶bWLAƒhdTargetshdtypedefdtrueaudTargetshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypejhdExternaltypereferenceaudOTP-PKIXdTargetjjdnojjdnoïbWLAƒhdPolicyConstraintshdtypedefdtruea¿dPolicyConstraintshdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypeaÀdrequireExplicitPolicyhdtypelhdtagdCONTEXTadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnodOPTIONALlhdCONTEXTajhd ComponentTypeaÁdinhibitPolicyMappinghdtypelhdtagdCONTEXTadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdnodOPTIONALlhdCONTEXTajjjjdno)bWLAƒhdSubjectDirectoryAttributeshdtypedefdtruea dSubjectDirectoryAttributeshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencea dOTP-PKIXd AttributejjdnolhdSizeConstrainthadMAXjjdnoËbWLAƒhdExtensionORAddressComponentshdtypedefdtruebßdExtensionORAddressComponentshdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebßdOTP-PKIXd PDSParameterjjdnozbWLAƒhdauthorityInfoAccesshdtypedefdtruebœdauthorityInfoAccesshdObjecthdExternaltypereferencebœdOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebdid-pe-authorityInfoAccesshdtypejdOBJECT IDENTIFIERjjdnoh aaaaaaaaahdTypehdExternaltypereferencebždOTP-PKIXdAuthorityInfoAccessSyntaxj_bWLAƒhdpolicyConstraintshdtypedefdtruebˆdpolicyConstraintshdObjecthdExternaltypereferencebˆdOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea½did-ce-policyConstraintshdtypejdOBJECT IDENTIFIERjjdnohaaaa$hdTypehdExternaltypereferencebŠdOTP-PKIXdPolicyConstraintsjƒbWLAƒhdsubjectDirectoryAttributeshdtypedefdtrueb|dsubjectDirectoryAttributeshdObjecthdExternaltypereferenceb|dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueažd id-ce-subjectDirectoryAttributeshdtypejdOBJECT IDENTIFIERjjdnohaaaa hdTypehdExternaltypereferenceb~dOTP-PKIXdSubjectDirectoryAttributesjpbWLAƒhdx400-poste-restante-addresshdtypedefdtruebdx400-poste-restante-addresshdObjecthdExternaltypereferencebdOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruebþdposte-restante-addresshdtypejdINTEGERjjdnoahdTypehdExternaltypereferenceb!dOTP-PKIXdPosteRestanteAddressj+bWLAƒhdSSLExtensionAttributeshdtypedefdtrueb¿dSSLExtensionAttributeshdtypelhdtagd UNIVERSALadIMPLICITa jhdSET OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb¿dOTP-PKIXdExtensionAttributejjdnolhdSizeConstrainthadMAXjjdno‰bWLAƒhdgn-basishdtypedefdtrueb¡dgn-basishdObjecthdExternaltypereferenceb¡dOTP-PKIXdCHARACTERISTIC-TWO-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea­dgnBasishdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaaahdTypehdtypedefdtrued undefinedhd primitivedbifhdtypelhdtagd UNIVERSALadIMPLICITajdNULLjjdnojnbWLAƒhd id-ecSigTypehdvaluedefdtruea„d id-ecSigTypehdtypejdOBJECT IDENTIFIERjjdnohaabHb'=avbWLAƒhdid-ce-subjectAltNamehdvaluedefdtruea|did-ce-subjectAltNamehdtypejdOBJECT IDENTIFIERjjdnohaaaaubWLAƒhdub-organizational-unit-namehdvaluedefdtruebBdub-organizational-unit-namehdtypejdINTEGERjjdnoa@}bWLAƒhdphysical-delivery-personal-namehdvaluedefdtruebádphysical-delivery-personal-namehdtypejdINTEGERjjdnoa KbWLAƒhdTeletexPersonalNamehdtypedefdtrueb°dTeletexPersonalNamehdtypelhdtagd UNIVERSALadIMPLICITa jhdSETdfalsedtruedfalselhd ComponentTypeb±dsurnamehdtypelhdtagdCONTEXTadIMPLICITajd TeletexStringlhdSizeConstrainthaa(jjdnod mandatorylhdCONTEXTajhd ComponentTypeb³d given-namehdtypelhdtagdCONTEXTadIMPLICITajd TeletexStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajhd ComponentTypebµdinitialshdtypelhdtagdCONTEXTadIMPLICITajd TeletexStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajhd ComponentTypeb·dgeneration-qualifierhdtypelhdtagdCONTEXTadIMPLICITajd TeletexStringlhdSizeConstrainthaajjdnodOPTIONALlhdCONTEXTajjjjdno¶bWLAƒhdOrganizationalUnitNamehdtypedefdtrueb…dOrganizationalUnitNamehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa jjdno¡bWLAƒhdX520countryNamehdtypedefdtrueaµdX520countryNamehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstraintajjdnošbWLAƒhdid-at-countryNamehdvaluedefdtruea³did-at-countryNamehdtypejhdExternaltypereferencea³dPKIX1Explicit88d AttributeTypejjdnohaaaaÉbWLAƒhdX520StateOrProvinceNamehdtypedefdtrueaydX520StateOrProvinceNamehdtypejhdCHOICElhd ComponentTypeazd teletexStringhdtypelhdtagd UNIVERSALadIMPLICITajd TeletexStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypea{dprintableStringhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypea|duniversalStringhdtypelhdtagd UNIVERSALadIMPLICITajdUniversalStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajhd ComponentTypea}d utf8Stringhdtypelhdtagd UNIVERSALa dIMPLICITajd UTF8StringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALa jhd ComponentTypea~d bmpStringhdtypelhdtagd UNIVERSALadIMPLICITajd BMPStringlhdSizeConstrainthaa€jjdnod mandatorylhd UNIVERSALajjjjdno§bWLAƒhdorganizationalUnitNamehdtypedefdtrueaÊdorganizationalUnitNamehdObjecthdExternaltypereferenceaÊdOTP-PKIXdATTRIBUTE-TYPE-AND-VALUE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtruea’did-at-organizationalUnitNamehdtypejhdExternaltypereferencea’dPKIX1Explicit88d AttributeTypejjdnohaaaa hdTypehdExternaltypereferenceaÌdOTP-PKIXdX520OrganizationalUnitNamejbWLAƒhd'ub-domain-defined-attribute-type-lengthhdvaluedefdtruebKd'ub-domain-defined-attribute-type-lengthhdtypejdINTEGERjjdnoasbWLAƒhd Trinomialhdtypedefdtruea¹d Trinomialhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERjjdnoœbWLAƒhd BaseCRLNumberhdtypedefdtrueb'd BaseCRLNumberhdtypelhdtagd UNIVERSALadIMPLICITajdINTEGERlhd ValueRangehadMAXjjdno§bWLAƒhdX520SerialNumberhdtypedefdtruea»dX520SerialNumberhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaa@jjdno‡bWLAƒhdX520dnQualifierhdtypedefdtruea¯dX520dnQualifierhdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringjjdnošbWLAƒhdid-at-dnQualifierhdvaluedefdtruea­did-at-dnQualifierhdtypejhdExternaltypereferencea­dPKIX1Explicit88d AttributeTypejjdnohaaaa.ŽbWLAƒhd id-ce-subjectDirectoryAttributeshdvaluedefdtrueažd id-ce-subjectDirectoryAttributeshdtypejdOBJECT IDENTIFIERjjdnohaaaa ›bWLAƒhd.extension-physical-delivery-address-componentshdvaluedefdtruebéd.extension-physical-delivery-address-componentshdtypejdINTEGERjjdnoa}bWLAƒhdextension-OR-address-componentshdvaluedefdtruebÝdextension-OR-address-componentshdtypejdINTEGERjjdnoa žbWLAƒhd X121Addresshdtypedefdtruebed X121Addresshdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstrainthaajjdnobWLAƒhd Extensionshdtypedefdtruebd Extensionshdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXd ExtensionjjdnolhdSizeConstrainthadMAXjjdnoebWLAƒhdCHARACTERISTIC-TWO-CLASShdclassdefdtruebdCHARACTERISTIC-TWO-CLASShd objectclasslhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnodUNIQUEd MANDATORYhd typefielddTyped MANDATORYjhd WITH SYNTAXldIDhdvaluefieldreferencediddTYPEhdtypefieldreferencedTypejQbWLAƒhdFIELD-ID-CLASShdclassdefdtrueb{dFIELD-ID-CLASShd objectclasslhdfixedtypevaluefielddidhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnodUNIQUEd MANDATORYhd typefielddTyped MANDATORYjhd WITH SYNTAXldIDhdvaluefieldreferencediddTYPEhdtypefieldreferencedTypejqbWLAƒhd c2onb239v4hdvaluedefdtruebd c2onb239v4hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaanbWLAƒhd c2onb191v4hdvaluedefdtrueaúd c2onb191v4hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaa¨bWLAƒhdCertificateListhdtypedefdtruebdCertificateListhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTypebd tbsCertListhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXd TBSCertListjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb dsignatureAlgorithmhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceb dOTP-PKIXdAlgorithmIdentifierjjdnod mandatorylhd UNIVERSALajhd ComponentTypeb!d signaturehdtypelhdtagd UNIVERSALadIMPLICITajhd BIT STRINGjjjdnod mandatorylhd UNIVERSALajjjjdnoxbWLAƒhdObjIdhdtypedefdtruebIdObjIdhdtypelhdtagd UNIVERSALadIMPLICITajdOBJECT IDENTIFIERjjdnoqbWLAƒhd c2onb239v5hdvaluedefdtruebd c2onb239v5hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaanbWLAƒhd c2onb191v5hdvaluedefdtrueaûd c2onb191v5hdtypejdOBJECT IDENTIFIERjjdnohaabHb'=aaa ‰bWLAƒhdid-holdinstruction-nonehdvaluedefdtruebNdid-holdinstruction-nonehdtypejdOBJECT IDENTIFIERjjdnohaabHb'8aa³bWLAƒhd GeneralNamehdtypedefdtruea‚d GeneralNamehdtypejhdCHOICEl hd ComponentTypeaƒd otherNamehdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaƒdOTP-PKIXd AnotherNamejjdnod mandatorylhdCONTEXTajhd ComponentTypea„d rfc822NamehdtypelhdtagdCONTEXTadIMPLICITajd IA5Stringjjdnod mandatorylhdCONTEXTajhd ComponentTypea…ddNSNamehdtypelhdtagdCONTEXTadIMPLICITajd IA5Stringjjdnod mandatorylhdCONTEXTajhd ComponentTypea†d x400AddresshdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferencea†dOTP-PKIXd ORAddressjjdnod mandatorylhdCONTEXTajhd ComponentTypea‡d directoryNamehdtypelhdtagdCONTEXTadEXPLICITa jhdExternaltypereferencea‡dOTP-PKIXdNamejjdnod mandatorylhdCONTEXTajhd ComponentTypeaˆd ediPartyNamehdtypelhdtagdCONTEXTadIMPLICITa jhdExternaltypereferenceaˆdOTP-PKIXd EDIPartyNamejjdnod mandatorylhdCONTEXTajhd ComponentTypea‰duniformResourceIdentifierhdtypelhdtagdCONTEXTadIMPLICITajd IA5Stringjjdnod mandatorylhdCONTEXTajhd ComponentTypeaŠd iPAddresshdtypelhdtagdCONTEXTadIMPLICITajd OCTET STRINGjjdnod mandatorylhdCONTEXTajhd ComponentTypea‹d registeredIDhdtypelhdtagdCONTEXTadIMPLICITajdOBJECT IDENTIFIERjjdnod mandatorylhdCONTEXTajjjjdnoibWLAƒhdteletex-personal-namehdvaluedefdtrueb®dteletex-personal-namehdtypejdINTEGERjjdnoaõbWLAƒhdAdministrationDomainNamehdtypedefdtrueb_dAdministrationDomainNamehdtypelhdtagd APPLICATIONadEXPLICITa jhdCHOICElhd ComponentTypeb`dnumerichdtypelhdtagd UNIVERSALadIMPLICITajd NumericStringlhdSizeConstrainthaajjdnod mandatorylhd UNIVERSALajhd ComponentTypebad printablehdtypelhdtagd UNIVERSALadIMPLICITajdPrintableStringlhdSizeConstrainthaajjdnod mandatorylhd UNIVERSALajjjjdnoªbWLAƒhdid-at-stateOrProvinceNamehdvaluedefdtrueawdid-at-stateOrProvinceNamehdtypejhdExternaltypereferenceawdPKIX1Explicit88d AttributeTypejjdnohaaaa\bWLAƒhdAttributeValuehdtypedefdtrueaAdAttributeValuehdtypejdASN1_OPEN_TYPEjjdnodbWLAƒhdx400-teletex-common-namehdtypedefdtruebædx400-teletex-common-namehdObjecthdExternaltypereferencebædOTP-PKIXdEXTENSION-ATTRIBUTE-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueb¥dteletex-common-namehdtypejdINTEGERjjdnoahdTypehdExternaltypereferencebèdOTP-PKIXdTeletexCommonNamej1bWLAƒhdSubjectInfoAccessSyntaxhdtypedefdtruebdSubjectInfoAccessSyntaxhdtypelhdtagd UNIVERSALadIMPLICITa jhd SEQUENCE OFhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferencebdOTP-PKIXdAccessDescriptionjjdnolhdSizeConstrainthadMAXjjdnowbWLAƒhdub-e163-4-sub-address-lengthhdvaluedefdtruebPdub-e163-4-sub-address-lengthhdtypejdINTEGERjjdnoa(bbWLAƒhd anyPolicyhdvaluedefdtrueaId anyPolicyhdtypejdOBJECT IDENTIFIERjjdnohaaaa a¬bWLAƒhd FreshestCRLhdtypedefdtrueaÿd FreshestCRLhdtypelhdtagd UNIVERSALadIMPLICITa jhdExternaltypereferenceaÿdOTP-PKIXdCRLDistributionPointsjjdnoGbWLAƒhd freshestCRLhdtypedefdtrueb˜d freshestCRLhdObjecthdExternaltypereferenceb˜dOTP-PKIXdEXTENSION-CLASSdtruehdobjectd defaultsyntaxlhdidhdvaluedefdtrueaýdid-ce-freshestCRLhdtypejdOBJECT IDENTIFIERjjdnohaaaa.hdTypehdExternaltypereferencebšdOTP-PKIXd FreshestCRLjÖbWLAƒhdEXTERNALhdtypedefdfalsed undefineddEXTERNALhdtypelhdtagd UNIVERSALadIMPLICITa jhdSEQUENCEdfalsedfalselhd ComponentTyped undefinedddirect-referencehdtypejdOBJECT IDENTIFIERjjdnodOPTIONALd undefinedhd ComponentTyped undefineddindirect-referencehdtypejdINTEGERjjdnodOPTIONALd undefinedhd ComponentTyped undefinedddata-value-descriptorhdtypejdObjectDescriptorjjdnodOPTIONALd undefinedhd ComponentTyped undefineddencodinghdtypejhdCHOICElhd ComponentTyped undefineddsingle-ASN1-typehdtypelhdtagdCONTEXTadEXPLICITa jdANYjjdnod mandatoryd undefinedhd ComponentTyped undefinedd octet-alignedhdtypelhdtagdCONTEXTadIMPLICITajd OCTET STRINGjjdnod mandatoryd undefinedhd ComponentTyped undefinedd arbitraryhdtypelhdtagdCONTEXTadIMPLICITajhd BIT STRINGjjjdnod mandatoryd undefinedjjjdnod mandatoryd undefinedjjjdno