cposxfs01.physics.ox.ac.uk
- University of Oxford -
Issued by AffirmTrust Certificate Authority - OV1
About this certificate
This digital certificate with serial number 5a:6e:75:b0:2f:7a:41:46:00:00:00:00:58:08:52:ea was issued on by AffirmTrust.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of Oxford
Organization:
University of Oxford
State / Province:
Oxfordshire
Locality: Oxford
Country: GB
Locality: Oxford
Country: GB
AffirmTrust
Organization:
AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Organization unit: See www.affirmtrust.com/repository
Country:
CA
This certificate has expire since
Certificate Details
Serial Number (hex): 5a:6e:75:b0:2f:7a:41:46:00:00:00:00:58:08:52:eaSerial Number (int): 120204059275855082013133682991044252394
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 5c:68:6d:37:01:04:22:aa:a9:1e:1a:d3:21:39:92:1c:28:20:d7:62
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4
Fingerprint (sha1): e4:28:e4:7a:bb:bb:44:ce:85:77:7d:87:48:e7:88:af:4a:73:63:4d
Fingerprint (sha256): 01:40:07:c3:d3:ab:a2:f5:d8:3a:94:a2:b8:42:8c:e1:6b:00:83:b2:51:64:de:4f:92:f3:19:f7:93:07:d4:4d
Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt
Revocation information
OCSP Server: http://ocsp.affirmtrust.comCRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl
Check the revocation status for certificate cposxfs01.physics.ox.ac.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cposxfs01.physics.ox.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cposxfs01.physics.ox.ac.uk
Other certificates including the domain name ox.ac.uk
(limited to 100 certificates)
idp.iamtest.ox.ac.uk
sn.sdc.ox.ac.uk
toothless.glam.ox.ac.uk
asmeals.chch.ox.ac.uk
sbs-libprox.sbs.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
drupal-pilot-rai.it.ox.ac.uk
seldenmap.bodleian.ox.ac.uk
bits.uas.ox.ac.uk
web.crested-test.haiku.fry-it.com
www.ict.ox.ac.uk
webcms-app-td.nsms.ox.ac.uk
community.bsg.ox.ac.uk
community.bsg.ox.ac.uk
ball.gtc.ox.ac.uk
autodiscover.nexus.ox.ac.uk
mobile.chorus.ox.ac.uk
golab.bsg.ox.ac.uk
tabul.ndorms.ox.ac.uk
print.new.ox.ac.uk
gbrowse.molbiol.ox.ac.uk
webmail.isis.ox.ac.uk
*.web.ox.ac.uk
isupplier.uas.ox.ac.uk
network.rhodeshouse.ox.ac.uk
castrovalva.it.ox.ac.uk
ssl1.aluminati.net
dpuk.fmrib.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
ouclf.law.ox.ac.uk
www2.oxford-man.ox.ac.uk
exprodo.fmrib.ox.ac.uk
trainforpedhiv.conted.ox.ac.uk
zoo-godfray.zoo.ox.ac.uk
print.lmh.ox.ac.uk
zoo-kfoster.zoo.ox.ac.uk
openclinica2.ocdem.ox.ac.uk
e2.shared.global.fastly.net
hrisprd.uas.ox.ac.uk
zoo-oxlel.zoo.ox.ac.uk
status.museums.ox.ac.uk
minerva.maths.ox.ac.uk
lists.maths.ox.ac.uk
e2.shared.global.fastly.net
incapsula.com
www.alumniweb.ox.ac.uk
epos.merton.ox.ac.uk
dars-project-training.bsp.ox.ac.uk
ibme-linuxdev.eng.ox.ac.uk
talks-dev.oucs.ox.ac.uk
rramp-test.octru.ox.ac.uk
bits.uas.ox.ac.uk
zoo-nercdtp.zoo.ox.ac.uk
fe1.chorus.ox.ac.uk
www.ml.ox.ac.uk
mimas.sgc.ox.ac.uk
webcms-1.nsms.ox.ac.uk
admn-sql03.connect.ox.ac.uk
cposxfs01.physics.ox.ac.uk
nsmsweb44.nsms.ox.ac.uk
printing.wadham.ox.ac.uk
app-vadalog.cs.ox.ac.uk
www.conted.ox.ac.uk
rramp-test.octru.ox.ac.uk
www.occt.ox.ac.uk
mysite.nexus.ox.ac.uk
www.bodleian.ox.ac.uk
spivey.oriel.ox.ac.uk
office-nextcloud-mmsid.ouce.ox.ac.uk
dars-website-test-one.bsp.ox.ac.uk
case-sql01.connect.ox.ac.uk
ridd.octru.ox.ac.uk
gower.octru.ox.ac.uk
sjc-kx.sjc.ox.ac.uk
malmecc.eu
webmail.earth.ox.ac.uk
dse.oucs.ox.ac.uk
sansonegroup.eng.ox.ac.uk
files.new.ox.ac.uk
analytics.spc.ox.ac.uk
medievalpaternosterwheels.bodleian.ox.ac.uk
tolkien.bodleian.ox.ac.uk
munki.orchard.ox.ac.uk
www.greenlightcreative.co.uk
staging.gatewayticketing.hosting
nsmsweb44.nsms.ox.ac.uk
www.mpls.ox.ac.uk
shapestacks.robots.ox.ac.uk
incapsula.com
webmail.earth.ox.ac.uk
owa.nexus.ox.ac.uk
live2.podcasts.ox.ac.uk
portal.stats.ox.ac.uk
bcfw.balliol.ox.ac.uk
www.kellogg.ox.ac.uk
drupaldev.conted.ox.ac.uk
worc-argon.worc.ox.ac.uk
members.hmc.ox.ac.uk
muninn.pmb.ox.ac.uk
mail.physiol.ox.ac.uk
sn.sdc.ox.ac.uk
toothless.glam.ox.ac.uk
asmeals.chch.ox.ac.uk
sbs-libprox.sbs.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
drupal-pilot-rai.it.ox.ac.uk
seldenmap.bodleian.ox.ac.uk
bits.uas.ox.ac.uk
web.crested-test.haiku.fry-it.com
www.ict.ox.ac.uk
webcms-app-td.nsms.ox.ac.uk
community.bsg.ox.ac.uk
community.bsg.ox.ac.uk
ball.gtc.ox.ac.uk
autodiscover.nexus.ox.ac.uk
mobile.chorus.ox.ac.uk
golab.bsg.ox.ac.uk
tabul.ndorms.ox.ac.uk
print.new.ox.ac.uk
gbrowse.molbiol.ox.ac.uk
webmail.isis.ox.ac.uk
*.web.ox.ac.uk
isupplier.uas.ox.ac.uk
network.rhodeshouse.ox.ac.uk
castrovalva.it.ox.ac.uk
ssl1.aluminati.net
dpuk.fmrib.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
ouclf.law.ox.ac.uk
www2.oxford-man.ox.ac.uk
exprodo.fmrib.ox.ac.uk
trainforpedhiv.conted.ox.ac.uk
zoo-godfray.zoo.ox.ac.uk
print.lmh.ox.ac.uk
zoo-kfoster.zoo.ox.ac.uk
openclinica2.ocdem.ox.ac.uk
e2.shared.global.fastly.net
hrisprd.uas.ox.ac.uk
zoo-oxlel.zoo.ox.ac.uk
status.museums.ox.ac.uk
minerva.maths.ox.ac.uk
lists.maths.ox.ac.uk
e2.shared.global.fastly.net
incapsula.com
www.alumniweb.ox.ac.uk
epos.merton.ox.ac.uk
dars-project-training.bsp.ox.ac.uk
ibme-linuxdev.eng.ox.ac.uk
talks-dev.oucs.ox.ac.uk
rramp-test.octru.ox.ac.uk
bits.uas.ox.ac.uk
zoo-nercdtp.zoo.ox.ac.uk
fe1.chorus.ox.ac.uk
www.ml.ox.ac.uk
mimas.sgc.ox.ac.uk
webcms-1.nsms.ox.ac.uk
admn-sql03.connect.ox.ac.uk
cposxfs01.physics.ox.ac.uk
nsmsweb44.nsms.ox.ac.uk
printing.wadham.ox.ac.uk
app-vadalog.cs.ox.ac.uk
www.conted.ox.ac.uk
rramp-test.octru.ox.ac.uk
www.occt.ox.ac.uk
mysite.nexus.ox.ac.uk
www.bodleian.ox.ac.uk
spivey.oriel.ox.ac.uk
office-nextcloud-mmsid.ouce.ox.ac.uk
dars-website-test-one.bsp.ox.ac.uk
case-sql01.connect.ox.ac.uk
ridd.octru.ox.ac.uk
gower.octru.ox.ac.uk
sjc-kx.sjc.ox.ac.uk
malmecc.eu
webmail.earth.ox.ac.uk
dse.oucs.ox.ac.uk
sansonegroup.eng.ox.ac.uk
files.new.ox.ac.uk
analytics.spc.ox.ac.uk
medievalpaternosterwheels.bodleian.ox.ac.uk
tolkien.bodleian.ox.ac.uk
munki.orchard.ox.ac.uk
www.greenlightcreative.co.uk
staging.gatewayticketing.hosting
nsmsweb44.nsms.ox.ac.uk
www.mpls.ox.ac.uk
shapestacks.robots.ox.ac.uk
incapsula.com
webmail.earth.ox.ac.uk
owa.nexus.ox.ac.uk
live2.podcasts.ox.ac.uk
portal.stats.ox.ac.uk
bcfw.balliol.ox.ac.uk
www.kellogg.ox.ac.uk
drupaldev.conted.ox.ac.uk
worc-argon.worc.ox.ac.uk
members.hmc.ox.ac.uk
muninn.pmb.ox.ac.uk
mail.physiol.ox.ac.uk
Certificate
The complete raw certificate details for cposxfs01.physics.ox.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIQWm51sC96QUYAAAAAWAhS6jANBgkqhkiG9w0BAQsFADCB gjELMAkGA1UEBhMCQ0ExFDASBgNVBAoTC0FmZmlybVRydXN0MSswKQYDVQQLEyJT ZWUgd3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MTAwLgYDVQQDEydBZmZp cm1UcnVzdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBPVjEwHhcNMTgwNDE2MTAw MDEyWhcNMjAwNDE2MTAzMDEwWjB4MQswCQYDVQQGEwJHQjEUMBIGA1UECBMLT3hm b3Jkc2hpcmUxDzANBgNVBAcTBk94Zm9yZDEdMBsGA1UEChMUVW5pdmVyc2l0eSBv ZiBPeGZvcmQxIzAhBgNVBAMTGmNwb3N4ZnMwMS5waHlzaWNzLm94LmFjLnVrMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqH/hN77aicORRymNWQLNSVj fHq9c2jzk96xdolpLcBPjBku7Ga7muqmkP44+eenGKAO37ftePGsPj/YVDb9j3CT GCyv3S2Aa9gUyCcpG8PqqdsHCkX/HfJyYh+Da7sADQUqtbtfydhXiPlCHE/wInp7 krKF22s/xoPljnRJ9wAhgI1fL03m0zSqO8Eygj7PAIjQuBhbVjBgQt2u1hPXlazQ rm8rvTCToUbSLO5V16EJg19bge0i365i5iXkkkc8kU9hBhh9O4V+Q9YlyRUhVI/k +ScCbDG3HOu8YHz19Y5l/bz0fkHz3HLiQ98TJmSLp5ltCxssDaH4Fgm3sAHXIwID AQABo4IBvzCCAbswEwYKKwYBBAHWeQIEAwEB/wQCBQAwJQYDVR0RBB4wHIIaY3Bv c3hmczAxLnBoeXNpY3Mub3guYWMudWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAJBgNVHRMEAjAAMGwGCCsGAQUFBwEBBGAw XjAnBggrBgEFBQcwAYYbaHR0cDovL29jc3AuYWZmaXJtdHJ1c3QuY29tMDMGCCsG AQUFBzAChidodHRwOi8vYWlhLmFmZmlybXRydXN0LmNvbS9hZnRvdjFjYS5jcnQw VwYDVR0gBFAwTjBCBgorBgEEAYKPCQIFMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v d3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MAgGBmeBDAECAjA8BgNVHR8E NTAzMDGgL6AthitodHRwOi8vY3JsLmFmZmlybXRydXN0LmNvbS9jcmwvYWZ0b3Yx Y2EuY3JsMB8GA1UdIwQYMBaAFP5gww2kop0hT3p4TGLF2xT8OXjEMB0GA1UdDgQW BBRcaG03AQQiqqkeGtMhOZIcKCDXYjANBgkqhkiG9w0BAQsFAAOCAQEAuGJN+iKc GdInMWWVfeLH8Bhu0TDOkpyeRbbxnD6pP+54ryvuMB2MleYQLz7kGVBoEWYcv5rC TwUDXCM6EbixDyVym2lBuDPkBnCHuxhEepE2cRJqbuAh75HSb32op2IplUMron8n I48IKPxrsjNJyR7X8Ym6hGrtrMHO7DdtOhV/Yb3wG74X+k0rXUz0tBVIJd9E2Mbg Sl8qOYLT6OjT2Ol2OEJC5hDVC5KiOooRVGpq1cG+3zVzxOhphO53/ffrbhOmj2+m lz+wFhN+T+4YCXd8YIaz2M/lcXFCdaxaxF5pMwrtc8UqyJBpA3pNKJoo3VXjxjZV ViWq9aRyGIUW3Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqH/hN77aicORRymNWQL NSVjfHq9c2jzk96xdolpLcBPjBku7Ga7muqmkP44+eenGKAO37ftePGsPj/YVDb9 j3CTGCyv3S2Aa9gUyCcpG8PqqdsHCkX/HfJyYh+Da7sADQUqtbtfydhXiPlCHE/w Inp7krKF22s/xoPljnRJ9wAhgI1fL03m0zSqO8Eygj7PAIjQuBhbVjBgQt2u1hPX lazQrm8rvTCToUbSLO5V16EJg19bge0i365i5iXkkkc8kU9hBhh9O4V+Q9YlyRUh VI/k+ScCbDG3HOu8YHz19Y5l/bz0fkHz3HLiQ98TJmSLp5ltCxssDaH4Fgm3sAHX IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 120204059275855082013133682991044252394 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-16 10:00:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-16 10:30:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oxfordshire' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oxford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Oxford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cposxfs01.physics.ox.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19520583215664007613163285410580423660527990819619786142641928439770110231092574551512436802780521087366055006839201904383618784703867078960651115934575269550719156875757109874909780641747940016598135779448366752759817638618848246510013796205782414072935248664253042451369586223909577729473898592708139919229121106170790738818998493082384060032401350133159949743076963347085855891991980385848694009609217772114727591952297430009013203959134544497908570141327569547932031950790995593263618677049711089501703362741631579536892624540011319930704002856754056373365900613729603320466351039632656313465107423400861034993443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cposxfs01.physics.ox.ac.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5c686d37010422aaa91e1ad32139921c2820d762 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b8624dfa229c19d2273165957de2c7f0186ed130ce929c9e45b6f19c3ea93fee78af2bee301d8c95e6102f3ee419506811661cbf9ac24f05035c233a11b8b10f25729b6941b833e4067087bb18447a913671126a6ee021ef91d26f7da8a7622995432ba27f27238f0828fc6bb23349c91ed7f189ba846aedacc1ceec376d3a157f61bdf01bbe17fa4d2b5d4cf4b4154825df44d8c6e04a5f2a3982d3e8e8d3d8e976384242e610d50b92a23a8a11546a6ad5c1bedf3573c4e86984ee77fdf7eb6e13a68f6fa6973fb016137e4fee1809777c6086b3d8cfe571714275ac5ac45e69330aed73c52ac89069037a4d289a28dd55e3c636555625aaf5a472188516dd