calgold.ca.gov

- State of California -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 4d:07:6d:a6:3a:8b:2b:7a:c7:f4:8c:30:2d:50:04:da was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of California

Organization: State of California
Organization unit: Department of Technology
Organization unit: Hosted by State of California
Organization unit: EliteSSL
Address: 1325 J Street, Suite 1600
Postal code: 95814
State / Province: CA
Locality: Sacramento
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:07:6d:a6:3a:8b:2b:7a:c7:f4:8c:30:2d:50:04:da
Serial Number (int): 102389125706088417992183390969619547354
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 73:d1:7d:94:85:97:0d:c8:60:ed:82:a4:b7:25:a8:ae:00:1b:4c:f5
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 26:c6:31:8f:72:ef:7b:99:1a:ac:28:e3:4b:74:39:f8:f2:d1:ca:8f
Fingerprint (sha256): 00:8e:65:5b:6a:b8:a4:49:a1:0e:9a:83:79:c7:d7:aa:1e:03:95:b8:fe:de:9e:b6:0c:d1:f4:c7:3b:c6:40:12

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate calgold.ca.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for calgold.ca.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calgold.ca.gov
www.calgold.ca.gov

Other certificates including the domain name ca.gov

(limited to 100 certificates)
tomalescsd.ca.gov
calbar.ca.gov
cbdmpdcs.cdph.ca.gov
test.cnips.ca.gov
eams.dwc.ca.gov
incapsula.com
staging3.rcpa.ca.gov
5671617594130432-fe3.pantheonsite.io
cases.oehha.ca.gov
google.ftb.ca.gov
incapsula.com
jobstraining.ca.gov
test-web-lws.edu.help
test.cairhub-vic-api.cdph.ca.gov
*.fire.ca.gov
www.dgsapps.dgs.ca.gov
*.cammis-mod-sit.dhcs.ca.gov
carpepm.almonds.com
*.dmhc.ca.gov
familieschange.ca.gov
incapsula.com
accountportalstg.cdph.ca.gov
cert00091-azurecdn.akamaized.net
supedocs.jud.ca.gov
pes.post.ca.gov
espssrs.oshpd.ca.gov
assist.dsh.ca.gov
cert00025-azurecdn.akamaized.net
test-www.ots.ca.gov
www.privacy.ca.gov
passwordreset.stg.courts.ca.gov
tnm.ftb.ca.gov
cert00080-azurecdn.akamaized.net
cert00025-azurecdn.akamaized.net
www.scout.ca.gov
brdcvpnb.net.ca.gov
californiasolarstatistics.ca.gov
ecr1.si.odi.cdt.ca.gov
imperva.com
cert00060-azurecdn.akamaized.net
performance.medi-cal.ca.gov
sdiom.edd.ca.gov
caleprocure.ca.gov
incapsula.com
wca.ca.gov
portal.ncric.ca.gov
dtsc.ca.gov
tahoe.ca.gov
*.ctc.ca.gov
incapsula.com
cert00078-azurecdn.akamaized.net
imperva.com
cert00091-azurecdn.akamaized.net
*.sos.ca.gov
pas.familieschange.ca.gov
calgold.ca.gov
*.kern.courts.ca.gov
saltoncsd.ca.gov
cert00078-azurecdn.akamaized.net
incapsula.com
www.sonoma.courts.ca.gov
www.cba.ca.gov
cert00078-azurecdn.akamaized.net
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
incapsula.com
*.sdcourt.ca.gov
incapsula.com
cert00052-azurecdn.akamaized.net
healthstrategicplan.sonomacounty.ca.gov
incapsula.com
apps.calbar.ca.gov
nartc.fcm.arizona.edu
www.yuba.courts.ca.gov
*.library.ca.gov
stanct.org
capiaa.ca.gov
cws.access.ca.gov
bboard.technology.ca.gov
SIS2STAGING.CDPH.CA.GOV
author.chhsa.ca.gov
5675267779461120-fe4.pantheonsite.io
grants.ca.gov
accepttest.medi-cal.ca.gov
calendar.sdzsafaripark.org
phnsdcounty.us
listserv.sco.ca.gov
pass.cdcr.ca.gov
www.casgem.water.ca.gov
mail.buttecourt.ca.gov
cert00068-azurecdn.akamaized.net
cert00098-azurecdn.akamaized.net
cert00025-azurecdn.akamaized.net
incapsula.com
sip.fiscal.ca.gov
panorama.epanet.ca.gov
SVGCALCDRM.ct.dot.ca.gov
incapsula.com
vpn1.dhcs.ca.gov
Info.fresno.courts.ca.gov

Certificate

The complete raw certificate details for calgold.ca.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2KuzmGpXfc1ncfxEViD
nTZ8omNVHSp8omUofSAXwmGaXR0sTLR4qPbKx8KwYhrVT94ElPUJnGSQPHOyPU47
SbD3PiuSFdqtfEoSTOjkBr7OowX6mIQ67dK/5Rgo/pV4gYyoPe0x8N9OR43Q/MVm
USI1q4vE/NFWYHXPut0T0cWU8uHfCL3A0thw4MRBgQhW8xE+S3O+c7aN+f9QdRHc
u/Q68aGCuEjsu2Do1rbu8BZuJw6LbTAM8k5bYzLL3LM+wIiF09Bm6ga7U2Gb144o
IAOW2dIXVKWtXIppO9K2sc+2h0k2PwqY42a6sF2cWrmEt/od4qtM8bRHzPQ8GxCM
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102389125706088417992183390969619547354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '95814'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sacramento'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1325 J Street, Suite 1600'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by State of California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EliteSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'calgold.ca.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20120552810015897534406019804920137386183747273535133719321379876900346483766331350456395950110648510225078981356550137978086341166451257925089658126101966828456713003590427417880570052214152786231233402517771820254195116910495026959833031118534527389749499959955289722124198682339403248382722908694930524105658613665241653965947227480581527912637903737994624348891087304732271945144342483322598458421068150507194131053000036456447791390757924594845272718422473844384951035996772232040974356215125902902495575672128721542218378040773329763745197139772743950828196639404549933773550861943948270863985184530370231569443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73d17d9485970dc860ed82a4b725a8ae001b4cf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calgold.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calgold.ca.gov'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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