mui.secureserver.net

- Special Domain Services, LLC -

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 27:a1:55:c6:b4:b5:17 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Special Domain Services, LLC

Company registration number: R-1724730-3
Organization: Special Domain Services, LLC
State / Province: Arizona
Locality: Scottsdale
Country: US

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:a1:55:c6:b4:b5:17
Serial Number (int): 11154913869739287
Serial Number lenght: 54 bits, 7 octets

SubjectKeyId: d6:27:62:6d:10:ef:e4:b9:64:b7:30:cb:7f:5a:bf:58:3f:f1:b6:33
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 8d:3b:e6:e4:77:e8:00:97:26:73:c6:a1:fc:12:8b:20:d6:73:cf:9d
Fingerprint (sha256): 01:9a:d6:eb:e8:4f:cc:ff:82:dd:60:ff:16:83:01:cf:50:5a:3a:fc:6e:b4:89:04:66:73:12:ae:e2:0b:ba:69

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s3-0.crl

Check the revocation status for certificate mui.secureserver.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mui.secureserver.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mui.secureserver.net
www.mui.secureserver.net

Other certificates including the domain name secureserver.net

(limited to 100 certificates)
ip-188-121-54-24.ip.secureserver.net
wordpress.n3plcpnl0278.prod.ams3.secureserver.net
ip-208-109-254-233.ip.secureserver.net
ip-132-148-166-0.ip.secureserver.net
n1nlsccweb.secureserver.net
*.nebula.secureserver.net
qsc-preview.secureserver.net
api-sg2n.winscc.int.secureserver.net
ip-72-167-224-220.ip.secureserver.net
ip-160-153-246-160.ip.secureserver.net
n1nmssqlpub.secureserver.net
img.secureserver.net
mailapi01.secureserver.net
photoalbum.secureserver.net
cloud.descobrindoideias.com
214.178.169.192.host.secureserver.net
emailforwarding.api.godaddy.com
ip-64-202-186-27.ip.secureserver.net
cvpn.ams3.secureserver.net
dbexternalsubscriber.secureserver.net
wordpress.sg3plcpnl0091.prod.sin3.secureserver.net
mobilemail06.secureserver.net
metrics.cdn.prod.secureserver.net
email12.secureserver.net
119.121.168.184.host.secureserver.net
ip-166-62-16-178.ip.secureserver.net
wordpress.p3plcpnl1063.prod.phx3.secureserver.net
img.ote.secureserver.net
mobilemail.secureserver.net
*.categories.api.secureserver.net
wordpress.n3plcpnl0135.prod.ams3.secureserver.net
ip-132-148-166-180.ip.secureserver.net
ip-107-180-92-173.ip.secureserver.net
mui.secureserver.net
myadventurepage.com
p3plentewe002.secureserver.net
237.151.167.72.host.secureserver.net
ip-160-153-235-247.ip.secureserver.net
ip-72-167-221-125.ip.secureserver.net
sg2nlsccws.secureserver.net
ip-107-180-90-160.ip.secureserver.net
*.commerce.secureserver.net
pjammcyclingworld.com
ip-107-180-90-213.ip.secureserver.net
dnsconfig.ote.int.secureserver.net
exec.migration-integration.int.secureserver.net
ip-148-72-22-19.ip.secureserver.net
ip-50-63-162-178.ip.secureserver.net
ip-208-109-10-161.ip.secureserver.net
ip-107-180-67-124.ip.secureserver.net
san-10-s11.tlsprovisioning.exacttarget.com
mailapi22.secureserver.net
domdns.api.godaddy.com
fax.secureserver.net
github.secureserver.net
ip-132-148-76-149.ip.secureserver.net
147.40.106.151.host.secureserver.net
*.proxy.apps-api.instantpage.secureserver.net
p3smysqladmin01.secureserver.net
ip-72-167-223-230.ip.secureserver.net
ip-160-153-235-189.ip.secureserver.net
ip-72-167-225-97.ip.secureserver.net
ip-192-169-232-180.ip.secureserver.net
ip-107-180-90-44.ip.secureserver.net
*.rss.apps.secureserver.net
ip-148-72-215-134.ip.secureserver.net
sg2nmssqladmin.secureserver.net
p3nmssqladmin.secureserver.net
ip-148-72-209-33.ip.secureserver.net
ip-107-180-90-145.ip.secureserver.net
tdns.secureserver.net
ip-50-62-165-237.ip.secureserver.net
ip-72-167-227-19.ip.secureserver.net
3.91.74.97.host.secureserver.net
ip-132-148-26-113.ip.secureserver.net
p3nlmysqladm002.secureserver.net
mobilemail.secureserver.net
mail.ex1.secureserver.net
n1nlsccweb.secureserver.net
*.cloudstorage.secureserver.net
68.227.167.72.host.secureserver.net
ip-192-169-232-180.ip.secureserver.net
*.ola-api.secureserver.net
ip-107-180-94-250.ip.secureserver.net
ip-72-167-224-139.ip.secureserver.net
ip-72-167-226-66.ip.secureserver.net
n3plccewe003.secureserver.net
wmt.secureserver.net
mailapi.secureserver.net
p3nmssqladmin.secureserver.net
akamaisecure7.qualtrics.com
240.164.205.92.host.secureserver.net
29.93.180.107.host.secureserver.net
products.secureserver.net
ip-50-62-76-219.ip.secureserver.net
wmt.secureserver.net
ip-208-109-9-4.ip.secureserver.net
wordpress.n3plcpnl0269.prod.ams3.secureserver.net
ip-192-169-205-24.ip.secureserver.net
san-10-s11.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for mui.secureserver.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVfq8Cs4E8efxvzStLim
+geswkGxkkVCDU/GqjYNAV308seCpx/6GZVlN/2GPsxOzuDPswloIm3pWyfDBiCt
lZq4bxlnkPeQ0N4OeJsBa5PPXu/oKxJ5m5CLrPxsRZEdgjZS5CxC4pLvVeDGCjpW
CJu6/HDEHLGToe75mkYl+aQZF9iXOxsNJCU/lISsgsF2XGxm16wQBeRhM9z65c86
ftFqpsJJtM6pqCcUriIDxzdqjil0UyituB2dB+8j5sXnN/4HawfKGkoPaPeiThYN
rwKm4isrMyV5GtfUZ+w9htvkcRPa4svnvPdHKBlD9irfBCTcquZAHE6gR5LuCsdn
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11154913869739287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-12 21:33:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-19 16:32:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R-1724730-3'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Special Domain Services, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mui.secureserver.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21377627386359052516905260751163023997821078013599492489674896015806170454721332154278583073386946764606122400058619575753348886405747465763375042707467365815637033815580632397537892877569368404581640240475492604700234783149455834878103922369688024658125171066893827839757417686523016798524884265135484694757951507436417011883324894274417164945192417313522214089318287623699430717912751338295866936982623882327917642678600502478495290185573902807169399342487906933848676541925003784289934835689773856037533788263737232731950860108196189401698528434119734938629672626374774898208381625372952557857778414981423804409639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s3-0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.3 (Starfield EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mui.secureserver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mui.secureserver.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d627626d10efe4b964b730cb7f5abf583ff1b633
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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