vxweo.dcmusic.ca
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 6b:f6:61:c6:cf:2c:78:43:67:3c:88:c9:ff:31:ee:d3 was issued on by SSL Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vxweo.dcmusic.ca
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 6b:f6:61:c6:cf:2c:78:43:67:3c:88:c9:ff:31:ee:d3Serial Number (int): 143506683721210455730126065243404758739
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 38:f2:3d:31:c6:e2:b6:00:ca:6f:9c:93:64:8b:6f:4d:f9:57:0f:4a
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): bd:30:cf:78:0b:e7:25:ba:45:c5:9d:76:19:75:33:6b:7b:ad:a3:03
Fingerprint (sha256): 00:eb:2a:d2:d0:a4:f2:6e:17:5d:39:15:c0:02:a0:a0:7b:52:51:1b:c2:6c:06:a9:a6:87:c8:b8:a4:a8:1d:70
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate vxweo.dcmusic.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vxweo.dcmusic.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vxweo.dcmusic.ca
Other certificates including the domain name dcmusic.ca
(limited to 100 certificates)
lsgpi.dcmusic.ca
virgrinia.dcmusic.ca
lgeguhr.dcmusic.ca
rnmuo.dcmusic.ca
vxweo.dcmusic.ca
ramlas.dcmusic.ca
milki.dcmusic.ca
camper.dcmusic.ca
ugus.dcmusic.ca
ivdqhv.dcmusic.ca
ladudleya.dcmusic.ca
bwida.dcmusic.ca
fuethy.dcmusic.ca
bigeva.dcmusic.ca
camarmarotha.dcmusic.ca
giywip.dcmusic.ca
lfyxdht.dcmusic.ca
arulna.dcmusic.ca
vecom.dcmusic.ca
vuwudute.dcmusic.ca
asocv.dcmusic.ca
lzlq.dcmusic.ca
takrank.dcmusic.ca
qobbanga.dcmusic.ca
ljxtx.dcmusic.ca
qidsej.dcmusic.ca
ersalan.dcmusic.ca
kupinglowo.dcmusic.ca
lbxh.dcmusic.ca
imperva.com
clambrighte.dcmusic.ca
mdkr.dcmusic.ca
gntlamlm.dcmusic.ca
kipacule.dcmusic.ca
tiagorosado.dcmusic.ca
indigf.dcmusic.ca
usfhn.dcmusic.ca
gimlgnn.dcmusic.ca
ramon.dcmusic.ca
ixddq.dcmusic.ca
damper.dcmusic.ca
holoda.dcmusic.ca
rmsinim.dcmusic.ca
brownse.dcmusic.ca
chsung.dcmusic.ca
bagar.dcmusic.ca
gamersony.dcmusic.ca
hjyoi.dcmusic.ca
hazbig.dcmusic.ca
rtozza.dcmusic.ca
meden.dcmusic.ca
ovml.dcmusic.ca
retainedrecruiters.dcmusic.ca
snkg.dcmusic.ca
ownh.dcmusic.ca
bvdte.dcmusic.ca
deepeastmotorsports.dcmusic.ca
naas.dcmusic.ca
bihiorneira.dcmusic.ca
ekfn.dcmusic.ca
ovqu.dcmusic.ca
marilyn.dcmusic.ca
pogun.dcmusic.ca
kgfh.dcmusic.ca
lodinsa.dcmusic.ca
lucas.dcmusic.ca
floreds.dcmusic.ca
zjipz.dcmusic.ca
hihhfp.dcmusic.ca
euqa.dcmusic.ca
rkcho.dcmusic.ca
socoxa.dcmusic.ca
agunlu.dcmusic.ca
ebuhealth.dcmusic.ca
sadirin.dcmusic.ca
simbals.dcmusic.ca
sotong.dcmusic.ca
rdaht.dcmusic.ca
gzody.dcmusic.ca
ossborne.dcmusic.ca
dcmusic.ca
cintial.dcmusic.ca
kudahorse.dcmusic.ca
vlyi.dcmusic.ca
william.dcmusic.ca
mbusut.dcmusic.ca
thomastun.dcmusic.ca
babscock.dcmusic.ca
cabinh.dcmusic.ca
dankr.dcmusic.ca
jit.dcmusic.ca
axwrh.dcmusic.ca
lengo.dcmusic.ca
gmpo.dcmusic.ca
catada.dcmusic.ca
maggellan.dcmusic.ca
vtagg.dcmusic.ca
cugyv.dcmusic.ca
vouvray.dcmusic.ca
bigperrysale.dcmusic.ca
virgrinia.dcmusic.ca
lgeguhr.dcmusic.ca
rnmuo.dcmusic.ca
vxweo.dcmusic.ca
ramlas.dcmusic.ca
milki.dcmusic.ca
camper.dcmusic.ca
ugus.dcmusic.ca
ivdqhv.dcmusic.ca
ladudleya.dcmusic.ca
bwida.dcmusic.ca
fuethy.dcmusic.ca
bigeva.dcmusic.ca
camarmarotha.dcmusic.ca
giywip.dcmusic.ca
lfyxdht.dcmusic.ca
arulna.dcmusic.ca
vecom.dcmusic.ca
vuwudute.dcmusic.ca
asocv.dcmusic.ca
lzlq.dcmusic.ca
takrank.dcmusic.ca
qobbanga.dcmusic.ca
ljxtx.dcmusic.ca
qidsej.dcmusic.ca
ersalan.dcmusic.ca
kupinglowo.dcmusic.ca
lbxh.dcmusic.ca
imperva.com
clambrighte.dcmusic.ca
mdkr.dcmusic.ca
gntlamlm.dcmusic.ca
kipacule.dcmusic.ca
tiagorosado.dcmusic.ca
indigf.dcmusic.ca
usfhn.dcmusic.ca
gimlgnn.dcmusic.ca
ramon.dcmusic.ca
ixddq.dcmusic.ca
damper.dcmusic.ca
holoda.dcmusic.ca
rmsinim.dcmusic.ca
brownse.dcmusic.ca
chsung.dcmusic.ca
bagar.dcmusic.ca
gamersony.dcmusic.ca
hjyoi.dcmusic.ca
hazbig.dcmusic.ca
rtozza.dcmusic.ca
meden.dcmusic.ca
ovml.dcmusic.ca
retainedrecruiters.dcmusic.ca
snkg.dcmusic.ca
ownh.dcmusic.ca
bvdte.dcmusic.ca
deepeastmotorsports.dcmusic.ca
naas.dcmusic.ca
bihiorneira.dcmusic.ca
ekfn.dcmusic.ca
ovqu.dcmusic.ca
marilyn.dcmusic.ca
pogun.dcmusic.ca
kgfh.dcmusic.ca
lodinsa.dcmusic.ca
lucas.dcmusic.ca
floreds.dcmusic.ca
zjipz.dcmusic.ca
hihhfp.dcmusic.ca
euqa.dcmusic.ca
rkcho.dcmusic.ca
socoxa.dcmusic.ca
agunlu.dcmusic.ca
ebuhealth.dcmusic.ca
sadirin.dcmusic.ca
simbals.dcmusic.ca
sotong.dcmusic.ca
rdaht.dcmusic.ca
gzody.dcmusic.ca
ossborne.dcmusic.ca
dcmusic.ca
cintial.dcmusic.ca
kudahorse.dcmusic.ca
vlyi.dcmusic.ca
william.dcmusic.ca
mbusut.dcmusic.ca
thomastun.dcmusic.ca
babscock.dcmusic.ca
cabinh.dcmusic.ca
dankr.dcmusic.ca
jit.dcmusic.ca
axwrh.dcmusic.ca
lengo.dcmusic.ca
gmpo.dcmusic.ca
catada.dcmusic.ca
maggellan.dcmusic.ca
vtagg.dcmusic.ca
cugyv.dcmusic.ca
vouvray.dcmusic.ca
bigperrysale.dcmusic.ca
Certificate
The complete raw certificate details for vxweo.dcmusic.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0TCCA7mgAwIBAgIQa/Zhxs8seENnPIjJ/zHu0zANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTIzMDEyMjE0MzYzNloXDTIzMDUwNjE0MzYzMVowGzEZMBcG A1UEAwwQdnh3ZW8uZGNtdXNpYy5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALW6RT3vP6CuL+ul2OChR+oFznnP2Z3VaDj3Oydh2xOUMiVcpjw/WwrM uIcBtGHJnPAutwxoSGY6RkKNX7+bco5DDWjjk7yXdUdxp6F8WBks/qLpBwGGJNN+ BY+5F5LYaEaWqT61qe10eY5umjDxcjhVvYdDZx3LafmorWaBMvrECCdGF7um6H23 2mu9VTOpqmiD62vPbVTCG15PKbtWw5bv/2FeXgSDQn0ex4X13BVELlhSF5h4gNps NGunGdQbmu2pBDnV2MxeNQcn7BaAc4qJiMVx2bLZnga/ANocDNn6odV3M6VRWSAG 1a0KYarHWw3/WH709zEOUvHwrAlsUF8CAwEAAaOCAcEwggG9MAwGA1UdEwEB/wQC MAAwHwYDVR0jBBgwFoAUJhR+4NzXpvfi1AQn32HxwuznMsowcgYIKwYBBQUHAQEE ZjBkMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydC5zc2wuY29tL1NTTGNvbS1TdWJD QS1TU0wtUlNBLTQwOTYtUjEuY2VyMCAGCCsGAQUFBzABhhRodHRwOi8vb2NzcHMu c3NsLmNvbTAbBgNVHREEFDASghB2eHdlby5kY211c2ljLmNhMFEGA1UdIARKMEgw CAYGZ4EMAQIBMDwGDCsGAQQBgqkwAQMBATAsMCoGCCsGAQUFBwIBFh5odHRwczov L3d3dy5zc2wuY29tL3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG AQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmxzLnNzbC5jb20vU1NM Y29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwHQYDVR0OBBYEFDjyPTHG4rYA ym+ck2SLb035Vw9KMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAgEAS5rUvC0P8AvUJ5FfjLYkaEWsi5Tf9RKysV/S hHXl4CYLZS+lKFHfjZCX3rPiTtAU6fAHqNJr48Yi6Zzp/BlY4jgHySYJ6AHH23D8 pR1rrZv8rDU0TUHqeNz0+ZE7KGc1MXicx1KXWHbq6B0lPBSVE0FR/02TA++hrxG7 /2gpyM0Ka9c/ZoSvxowP2lPTsHyUnf7Vkex9Y6RpfN8gBql1DKOMyLbu7BTYEA8q SB/4e+QCjDGs9PuInNyI+0THaLxkYKWaE48xbUnzycL66g4i40MUmHPog9U3zEo3 2MluQ4e4EimteUZK43Gp5OPXS30g8t+AFAcD7Ibzl5ZQpIiWteHiB4TtF1QOP/02 CsauRgUTst9laBvkBVXdYPsD+NgeQ8AXQKGpupcX16aADEqspyy7W0fyoGTofMfh AKUC3efIPc3LRTXcCJNqJlqkchT8SKOqP/MqR13L6KPbvpYd/de3ZgiucDRj2Gks b5OHulkTqe5d+WpTIWU3qrBDrVQpRhvQIlliMK2wzctl/yHBy+06YMiC2lmxCGjV Hrw3h0Vt/kKDDjjTmyHuAOLyGtkpj8ziDAKLZUiLpIHZYII5QgZTZ84mLKXS67t4 3EN7itpeW/LaVHzHSPxPk4CSCIjY9QHBXsMhCp/YkPmrxg/uPQBqe8qMQZqnPEZN T9cshis= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbpFPe8/oK4v66XY4KFH 6gXOec/ZndVoOPc7J2HbE5QyJVymPD9bCsy4hwG0Ycmc8C63DGhIZjpGQo1fv5ty jkMNaOOTvJd1R3GnoXxYGSz+oukHAYYk034Fj7kXkthoRpapPrWp7XR5jm6aMPFy OFW9h0NnHctp+aitZoEy+sQIJ0YXu6bofbfaa71VM6mqaIPra89tVMIbXk8pu1bD lu//YV5eBINCfR7HhfXcFUQuWFIXmHiA2mw0a6cZ1Bua7akEOdXYzF41ByfsFoBz iomIxXHZstmeBr8A2hwM2fqh1XczpVFZIAbVrQphqsdbDf9YfvT3MQ5S8fCsCWxQ XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 143506683721210455730126065243404758739 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-22 14:36:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 14:36:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vxweo.dcmusic.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22940986594141318368307772064953703973186266326716639472038727633330974019839254464690682815241850655496042239257608638187148639965524780618380995554453042293297954473249780943157099401819467278698692725348302697629370205777502094206927564342179665164075758449856970227135693522195398769730921584772277555366686608499592917737031480426720746809058699201205533175744868849165040103100248753870234353197916808749859474716215449343888730685330657706502442841303587842752070102959393115376688829827571025042972493340379692370368404892043417364360179981933910500844448307302058070621318809730470611905703358663878356258911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vxweo.dcmusic.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 38f23d31c6e2b600ca6f9c93648b6f4df9570f4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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