secure.wego.com

- Wego Pte. Ltd. -

Issued by StartCom Extended Validation Server CA

About this certificate

This digital certificate with serial number 0e:bb was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • X520 Subject fields MUST only contain printable control characters (RFC 5280: Appendix A)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Wego Pte. Ltd.

Company registration number: 200506074G
Organization: Wego Pte. Ltd.
Address: 100 Beach Road, 23-07⁄13, Shaw Tower
Postal code: 189702
State / Province: Singapore
Locality: Singapore
Country: SG

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:bb
Serial Number (int): 3771
Serial Number lenght: 12 bits, 2 octets

SubjectKeyId: 4e:4a:99:e8:88:a4:2c:f4:00:f6:2d:c2:b2:22:da:91:e8:6d:4c:a3
AuthorityKeyId: a1:e1:9e:45:25:79:4d:06:d9:02:17:92:82:d5:30:89:72:25:14:a0

Fingerprint (sha1): d6:5c:e1:4a:d6:bd:fb:e5:61:7a:6b:87:d0:68:86:c7:29:1a:89:f6
Fingerprint (sha256): 01:a2:88:8f:21:2d:34:3d:65:72:ad:15:6b:a7:19:da:a8:ac:7d:04:ca:61:e4:bf:73:91:cf:73:59:16:ac:cc

Issuing Certificate URL: http://aia.startssl.com/certs/sub.class4.server.ca.crt

Revocation information

OCSP Server: http://ocsp.startssl.com/sub/class4/server/ca
CRL Distribution Point: http://crl.startssl.com/crt4-crl.crl

Check the revocation status for certificate secure.wego.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.wego.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.wego.com
wego.com

Other certificates including the domain name wego.com

(limited to 100 certificates)
ssl2.cdngc.net
ssl2.cdngc.net
forms.e-kendra.co.in
ssl2.cdngc.net
srv.wego.com
ssl2.cdngc.net
secure.wego.com
ssl2.cdngc.net
s0.san.cloudinary.com
forms.rodio.in
s3-cloudinary-pin.map.fastly.net
dz.wego.com
s3-cloudinary-pin.map.fastly.net
cloudinary2.map.fastly.net
s3-cloudinary-pin.map.fastly.net
jo.wego.com
ssl2.cdngc.net
s0.san.cloudinary.com
ssl2.cdngc.net
ssl2.cdngc.net
sy.wego.com
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
ssl2.cdngc.net
ssl2.cdngc.net
s3-cloudinary-pin.map.fastly.net
ssl2.cdngc.net
wego.com
s0.san.cloudinary.com
s0.san.cloudinary.com
s0.san.cloudinary.com
ssl2.cdngc.net
cloudinary2.map.fastly.net
ssl2.cdngc.net
ssl2.cdngc.net
s3-cloudinary-pin.map.fastly.net
ssl2.cdngc.net
mo.wego.com
ssl2.cdngc.net
s0.san.cloudinary.com
go.wego.com
s0.san.cloudinary.com
s3-san.cloudinary.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
s0.san.cloudinary.com
ssl2.cdngc.net
ssl2.cdngc.net
cloudinary2.map.fastly.net
ssl2.cdngc.net
s3-cloudinary-pin.map.fastly.net
cloudinary2.map.fastly.net
s0.san.cloudinary.com
ssl2.cdngc.net
cloudinary2.map.fastly.net
go.wego.com
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
ssl2.cdngc.net
cloudinary2.map.fastly.net
ssl2.cdngc.net
travel.wego.com
s3-san.cloudinary.com
member.truthto888.com
ssl2.cdngc.net
ssl2.cdngc.net
geeks.wego.com
geeks.wego.com
ssl2.cdngc.net
ssl2.cdngc.net
secure.wego.com
s3-cloudinary-pin.map.fastly.net
ssl2.cdngc.net
secure.wego.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
s3-san.cloudinary.com
monitor-cflare.wego.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
blog-new.wego.com
cloudinary2.map.fastly.net
s3-cloudinary-pin.map.fastly.net
cloudinary2.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s0.san.cloudinary.com
ssl2.cdngc.net
www.astroslay.com
s3-san.cloudinary.com
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
tn.wego.com
s3-cloudinary-pin.map.fastly.net
monitor-cflare.wego.com

Certificate

The complete raw certificate details for secure.wego.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLZgKJgwKGE7I+SalWTo
5GJ2gNyEPFf0Tx0DW0kx7wJSwcLAiNJ2AbiVp2pSCWoJaeyWX2bz449W9g9HTxoO
zavqBc0FWk04y0XadOcaqMis3nbBqHr8kIqWIHx9WpTwOW+4cD++CvjbWYAN6rpw
S8mRjSegNZ/9J47sCD2wGGYo4TC5NUuPN6DUAXOJqNE+qXeRgN+7zU9ALUvDtraA
Z3QfGVYbeylvUSS3fS/k5OcQf9XxyAcKiJ6nV/s2cSpge8cVn6VyBSmFWCMRZHZi
UG92nTXYdyL0MlHXbSka9250lbY8n9WiYdPlgX8pL0pqVACJBu3x0NArMlaQ4Q6s
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-24 10:12:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-24 10:12:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '189702'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 49 0 48 0 48 0 32 0 66 0 101 0 97 0 99 0 104 0 32 0 82 0 111 0 97 0 100 0 44 0 32 0 50 0 51 0 45 0 48 0 55 32 68 0 49 0 51 0 44 0 32 0 83 0 104 0 97 0 119 0 32 0 84 0 111 0 119 0 101 0 114]
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wego Pte. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.wego.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200506074G'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24327687323260811182884696720656628237353258460184198782789979830353759154433870937220269863724818452277496861569230984864435593542308767456184374362909613119120491300219185277821943851507602142196197785838958584729211476508237921963392335853522356072588494895548500964155399845481930456890791603042013160920016668279017322777472533698347949811514857007793661922594503796618843773509243315234076198626968183235461102761144673968115486308726501828755814539125674754181741279186456227476073773980098343276961628942325099044517393892712993655792276384674136979592989253165718377408001978882466277539094071979166500039767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e4a99e888a42cf400f62dc2b222da91e86d4ca3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a1e19e4525794d06d902179282d53089722514a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wego.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (402 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.1.1 (StartCom EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/extended.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'StartCom Certification Authority'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 119 97 115 32 105 115 115 117 101 100 32 97 99 99 111 114 100 105 110 103 32 116 111 32 116 104 101 32 69 120 116 101 110 100 101 100 32 86 97 108 105 100 97 116 105 111 110 32 114 101 113 117 105 114 101 109 101 110 116 115 32 111 102 32 116 104 101 32 83 116 97 114 116 67 111 109 32 67 65 32 112 111 108 105 99 121 44 32 114 101 108 105 97 110 99 101 32 111 110 108 121 32 102 111 114 32 116 104 101 32 105 110 116 101 110 100 101 100 32 112 117 114 112 111 115 101 32 105 110 32 99 111 109 112 108 105 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 121 105 110 103 32 112 97 114 116 121 32 111 98 108 105 103 97 116 105 111 110 115 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/crt4-crl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com/sub/class4/server/ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sub.class4.server.ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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