etsvcln2029.etslan.org

- Educational Testing Service -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 53:9d:23:b8:f6:c5:31:fa:92:1a:99:97:d9:78:af:5c was issued on by COMODO CA Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Educational Testing Service

Organization: Educational Testing Service
Organization unit: Non-Production-Server
Organization unit: Hosted by Educational Testing Service
Organization unit: Unified Communications
Address: Rosedale Road
Postal code: 08541
State / Province: New Jersey
Locality: Princeton
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 53:9d:23:b8:f6:c5:31:fa:92:1a:99:97:d9:78:af:5c
Serial Number (int): 111141838795627722642484773142954291036
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 68:49:23:a3:c6:89:41:ad:43:a8:e4:a4:c0:3c:9c:8c:19:8b:d3:5c
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 2a:74:93:3a:04:f2:7a:5e:c7:a6:c3:3e:49:d4:23:b5:be:28:a4:48
Fingerprint (sha256): 02:48:3f:da:5f:c0:4a:3d:50:b0:90:c5:a9:7b:8b:4b:23:c9:b5:cd:3d:99:81:0b:86:99:d1:d9:83:61:6c:41

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate etsvcln2029.etslan.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etsvcln2029.etslan.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etsvcln2029.etslan.org
etsvcln2030.etslan.org
etsvcln2033.etslan.org
etsvcln2034.etslan.org
etsvcln2035.etslan.org
etsvcln2036.etslan.org

Other certificates including the domain name etslan.org

(limited to 100 certificates)
webgatetestip-etsvcln0926.etslan.org
etsvcln2029.etslan.org
etsvcln0520.etslan.org
e1bspd.etslan.org
etsvln160.etslan.org
one-externalservices-a.etslan.org
etsln338.etslan.org
one-chat.ets.org
oimws11g-tst.ets.org
webgateprod-tlcsetsvcln0716.etslan.org
webgate1015-instport.etslan.org
authnsvc.ets.org
webgate1014-instport.etslan.org
etsvcln1039.etslan.org
etsvcln0855.etslan.org
etsvcnt1470.etsapptst.org
e1jspd.etslan.org
etsdaas2.etslan.org
etsln275.etslan.org
engvcln0002.etslan.org
webgatetest1-etsvcln166.etslan.org
etsvcln2025.etslan.org
etsvcln2072.etslan.org
uscdcvpn01.ets.org
webgatedev-ttl2etsvcln177.etslan.org
iviewer-uat.ets.org
oim11g-tst.ets.org
oimsoa11g.etslan.org
etsvcln186.etslan.org
e1bspd.etslan.org
webgate1014-instport.etslan.org
etsvcln2356.etslan.org
oim11g-stg.ets.org
one.perfdev.ets.org
webgatestage-etsvcln0538.etslan.org
one.perfdev-web-a.ets.org
etsvcln0533.etslan.org
webgatetestip-etsvcln0926.etslan.org
ussaovpn01.ets.org
etsvcln0896.etslan.org
erater-new-stage.ets.org
erater-new-dev.ets.org
ibt2-cloud-sb.ets.org
webgatestage-iptmgr.etslan.org
etsvcln212.etslan.org
webagterpmtest2-etsvcln1460.etslan.org
usndcvpn01.ets.org
webgateuat-ereg4.etslan.org
etssorry.ets.org
erater-new-test.ets.org
sente1orderstatus-stg.etslan.org
webgate4prod.etslan.org
etsvcln204.etslan.org
etsvcln165.etslan.org
etsvcnt1529.etslan.org
sente1orderstatus-test.etslan.org
webagatestage1-ip-etsvcln0927.etslan.org
webgateuat-etsvcln1461.etslan.org
one.perfdev.ets.org
e1jspd.etslan.org
etsvcln186.etslan.org
etsvcln0904.etslan.org
mytoms-stage.ets.org
etsvcln214.etslan.org
etsln275.etslan.org
sharepoint.ets.org
oimsoa11g-stg.ets.org
one-ot-metaservices.ets.org
etslan.org
sentpreprocess.etslan.org
webgatetest1-rmnetsvcln0888.etslan.org
webgateuat-ereg4.etslan.org
webgate-ipackager.etslan.org
sentpreprocess.etslan.org
etslan.org
etsvcnt0887.idmlab.org
erater-new-test.ets.org
webgatetest-iptmgr.etslan.org
etsvcnt1459.etslan.org
webgateuatrpm-etsvcln1462.etslan.org
oimsoa11g-tst.ets.org
webgatetest2-rmnetsvcln0889.etslan.org
webgateprod-esd.etslan.org
erater-new-test.ets.org
one.perfdev-web-a.ets.org
appd-test.ets.org
etsvcnt186.etslan.org
eias11g.ets.org
erater-new-test.ets.org
e1jspd.etslan.org
etsvcln0532.etslan.org
etsvcln2347.etslan.org
webgaterpmot1-etsvcln1463.etslan.org
eias11g.ets.org
etsvcnt185.etslan.org
etsawsln0101.etslan.org
etsvcln0855.etslan.org
etsln275.etslan.org
etsvcln1211.etslan.org
researchtech.ets.org

Certificate

The complete raw certificate details for etsvcln2029.etslan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqUjUS3J/Vc3jgVdaj6x
Slxem58kLtNHGbjFu//ATtFWSnxRZlLD2EvlQwDd/P7K/MC0I9sYtTJqWcq+LpwZ
iq8B6AdnxdffXEWlVkraxEFZ2tdZq89RMdWDpvpKAtWybLTEy1biZTFV9NN3WXHY
NLQLOW/QY9vOglY05OZTy05zj70VHNsrIEvq5NmkhQ/WuXEVJbGs58BOHAJqwfI5
WPFPiKQoy9026ry3AAL3cMFC9e39RmEzm1vMmx6HUjxwYgxCjdUDLb2KdQD8D11U
eWoSehzRjtbx+AURlHs6FknULjwLo44c2BFUVzKd14rIck5eIm6UVIsdDsVY76zs
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111141838795627722642484773142954291036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08541'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rosedale Road'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Non-Production-Server'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'etsvcln2029.etslan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24066710505398514061427883397215796084500381444399003205697242387865829197572618155553151130292258767579098276302493910630400982786003771306862963926159567825731745648338297821791809650278350925340229733366522521803121171806491517287165044569108419307301587952302627622126887583570113729749556868053043830879109484283685021214613668531397383440269058821784216494894786596801082378112713584760893635061269423009912831116956387163720458015189896592471530300956143723927275687404354576451075590962481720441520145079373011889360316192983453842542763660653627394021341371103644822080178575806647166156692405960603255762057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							684923a3c68941ad43a8e4a4c03c9c8c198bd35c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsvcln2029.etslan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsvcln2030.etslan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsvcln2033.etslan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsvcln2034.etslan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsvcln2035.etslan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsvcln2036.etslan.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008371a61847b546599438fc2bdc8707b5ac5140bedf104c9caedfefe66b57183d8ac552b3102fe21f705e72a21af73faf4f3f6e1a28d0f5bcd56ecae5a46efccbe9db72ae6559714c695d037873f5ed2fa4b5faaba6b457ba9f2351fa072a229f4cd1410f99eccffddf9b1ff12f667b1a2a813769b8e8d7a3510521180c644bbd923bec978ac90e50fc9bdcbab4bb09f3b923062abfeb10ca3d7346f0637633d7918a917c981290a4332d9f0df80dcd23ba410f5f6e8b0199124d0e498102020cadde697f2f777660bb5ebc83ca6a8a7398125670d6d1f322e14cb92bd48c4a6123d5d0ac85684a97940b4cda3edc881179da3bace17e9284cdc8ce8e1b06c674