aristors.epizy.com
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 6e:79:45:75:b8:95:cd:02:71:86:fd:6f:23:76:67:26 was issued on by StartCom Ltd..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aristors.epizy.com,C=US
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 6e:79:45:75:b8:95:cd:02:71:86:fd:6f:23:76:67:26Serial Number (int): 146844756269307466181110770735676548902
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 0d:c9:82:9f:b2:e9:ed:1e:9e:f5:44:49:91:52:4c:3d:99:d8:7b:fd
AuthorityKeyId:
Fingerprint (sha1): cb:e5:29:1c:7d:52:e8:b9:9a:0d:bf:9c:8e:fb:7f:6e:c0:25:d4:24
Fingerprint (sha256): 02:5b:7a:13:c9:59:17:ff:45:ab:39:45:07:fa:cb:2e:25:3d:29:d1:8b:a6:e3:bc:5e:df:4d:57:e8:b4:3f:44
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate aristors.epizy.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aristors.epizy.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aristors.epizy.com
Other certificates including the domain name epizy.com
(limited to 100 certificates)
icngroup.epizy.com
artzam.epizy.com
ardenthealthy.epizy.com
cosmicside.epizy.com
jobtrainadmin12345.epizy.com
www.lesel.epizy.com
balkanriders.epizy.com
bareillybazar.epizy.com
microblading-segredos-curso-site.epizy.com
xvicongresointernacionaldeadm.epizy.com
truegod.epizy.com
worldsketch.epizy.com
comoresacad.epizy.com
checkfiles.epizy.com
www.expertpharmacy.epizy.com
jlsetnuper.epizy.com
aristors.epizy.com
whatsappgroupinvitelink.in
www.excelmyanmar.epizy.com
hppowerutility.epizy.com
consultorio.epizy.com
healthyload.epizy.com
tiertoz.epizy.com
www.cyrecs.epizy.com
sailorsabroad.epizy.com
ntrblxforums.epizy.com
hrms.digitaldhi.com
a1r.thenewscasts.com
wraeclub.epizy.com
jasaperancangsitusweb.epizy.com
bophea.epizy.com
www.hamacheez.epizy.com
ognjenblog.epizy.com
sabean.epizy.com
dcscorehunters.epizy.com
firedamage.epizy.com
www.autoinsurance.epizy.com
people.aicl.in
chatt.epizy.com
dealsofloan.epizy.com
todayhealth.epizy.com
adspyglass.bunkerprimenetwork.epizy.com
shutterdowner.epizy.com
healthyreadnow.epizy.com
*.facts-360.epizy.com
www.kennethchan.epizy.com
cpanel.epizy.com
app.epizy.com
kingnso.epizy.com
kanavann.epizy.com
www.shashwatk.epizy.com
people.concertcare.com
tv-moviezz.epizy.com
inout.ucesolutions.io
www.express.epizy.com
artzam.epizy.com
crypto-trader.crypto-barter.epizy.com
vufbikes.epizy.com
gnum933.dynu.net
www.arvind.epizy.com
shopchina.epizy.com
pacego.epizy.com
arkarucst.epizy.com
newddd.epizy.com
mcasino1.epizy.com
noahbisuteria.epizy.com
perezapps.epizy.com
liveico.epizy.com
stormi.epizy.com
savageartwork.epizy.com
tauchosam.epizy.com
fennell.epizy.com
paulblog.epizy.com
ndhusocialife.epizy.com
dailyhealthynow.epizy.com
abc.qwerty123.epizy.com
www.iceland-salad.epizy.com
eleccion2018.epizy.com
ffja.epizy.com
www.louiserochette.epizy.com
ebook-shop.epizy.com
stylish.epizy.com
origin-vault.epizy.com
arteen.epizy.com
photopic.epizy.com
monsterandme.epizy.com
www.ryreon.epizy.com
fightingfit.epizy.com
blaltw.epizy.com
greathhealthy.epizy.com
www.sarithacreations.epizy.com
finefat.epizy.com
i7ed.epizy.com
starloop.epizy.com
adspyglass.bunkerprimenetwork.epizy.com
www.oliveirablog.epizy.com
www.cyrecs.epizy.com
greathhealthy.epizy.com
sonjoy.epizy.com
blog.mafiroom.epizy.com
artzam.epizy.com
ardenthealthy.epizy.com
cosmicside.epizy.com
jobtrainadmin12345.epizy.com
www.lesel.epizy.com
balkanriders.epizy.com
bareillybazar.epizy.com
microblading-segredos-curso-site.epizy.com
xvicongresointernacionaldeadm.epizy.com
truegod.epizy.com
worldsketch.epizy.com
comoresacad.epizy.com
checkfiles.epizy.com
www.expertpharmacy.epizy.com
jlsetnuper.epizy.com
aristors.epizy.com
whatsappgroupinvitelink.in
www.excelmyanmar.epizy.com
hppowerutility.epizy.com
consultorio.epizy.com
healthyload.epizy.com
tiertoz.epizy.com
www.cyrecs.epizy.com
sailorsabroad.epizy.com
ntrblxforums.epizy.com
hrms.digitaldhi.com
a1r.thenewscasts.com
wraeclub.epizy.com
jasaperancangsitusweb.epizy.com
bophea.epizy.com
www.hamacheez.epizy.com
ognjenblog.epizy.com
sabean.epizy.com
dcscorehunters.epizy.com
firedamage.epizy.com
www.autoinsurance.epizy.com
people.aicl.in
chatt.epizy.com
dealsofloan.epizy.com
todayhealth.epizy.com
adspyglass.bunkerprimenetwork.epizy.com
shutterdowner.epizy.com
healthyreadnow.epizy.com
*.facts-360.epizy.com
www.kennethchan.epizy.com
cpanel.epizy.com
app.epizy.com
kingnso.epizy.com
kanavann.epizy.com
www.shashwatk.epizy.com
people.concertcare.com
tv-moviezz.epizy.com
inout.ucesolutions.io
www.express.epizy.com
artzam.epizy.com
crypto-trader.crypto-barter.epizy.com
vufbikes.epizy.com
gnum933.dynu.net
www.arvind.epizy.com
shopchina.epizy.com
pacego.epizy.com
arkarucst.epizy.com
newddd.epizy.com
mcasino1.epizy.com
noahbisuteria.epizy.com
perezapps.epizy.com
liveico.epizy.com
stormi.epizy.com
savageartwork.epizy.com
tauchosam.epizy.com
fennell.epizy.com
paulblog.epizy.com
ndhusocialife.epizy.com
dailyhealthynow.epizy.com
abc.qwerty123.epizy.com
www.iceland-salad.epizy.com
eleccion2018.epizy.com
ffja.epizy.com
www.louiserochette.epizy.com
ebook-shop.epizy.com
stylish.epizy.com
origin-vault.epizy.com
arteen.epizy.com
photopic.epizy.com
monsterandme.epizy.com
www.ryreon.epizy.com
fightingfit.epizy.com
blaltw.epizy.com
greathhealthy.epizy.com
www.sarithacreations.epizy.com
finefat.epizy.com
i7ed.epizy.com
starloop.epizy.com
adspyglass.bunkerprimenetwork.epizy.com
www.oliveirablog.epizy.com
www.cyrecs.epizy.com
greathhealthy.epizy.com
sonjoy.epizy.com
blog.mafiroom.epizy.com
Certificate
The complete raw certificate details for aristors.epizy.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIQbnlFdbiVzQJxhv1vI3ZnJjANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MDcyMTA5NDg0MloXDTE3MDcy MTA5NDg0MlowKjELMAkGA1UEBhMCVVMxGzAZBgNVBAMMEmFyaXN0b3JzLmVwaXp5 LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7mrbYpr+bPEKD7 WEktPyM1nQyPiBOGeIkAj3ZE6am/OvgRtRErAlN4vjxNfinsDDKmWCCaPDXeUBPF r75S+2MVl5BUMV8j3vbeisq8bk2ndXNULGLAajJL0Hp9JSomCR91Sg6waOzDJ66W aKpSQ3+ALq/T09EX6DENVuVHC5nVb4NrKzTxhr8itVZkMAGOQ1h5HkJ7z2huxSmr tvKHlmUWnXhge2k/+QDAH8KoIl7u4PfaM6fTXZ44y8BHjncPqFmJoovKq3IHJq2Q u/pAvHs2/nuQSAtaAgPp1vnUQbk90WuNLf0aQjjkUXywXXXtFLQdKQWHwf7zMfxm UA601GsCAwEAAaOCAbQwggGwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAgYIKwYBBQUHAwEwCQYDVR0TBAIwADAdBgNVHQ4EFgQUDcmCn7Lp7R6e 9URJkVJMPZnYe/0wbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5zdGFydHNzbC5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9haWEuc3RhcnRz c2wuY29tL2NlcnRzL3NjYS5zZXJ2ZXIxLmNydDA4BgNVHR8EMTAvMC2gK6Aphido dHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zY2Etc2VydmVyMS5jcmwwHQYDVR0RBBYw FIISYXJpc3RvcnMuZXBpenkuY29tMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tLzBRBgNVHSAESjBIMAgGBmeBDAECATA8BgsrBgEEAYG1NwECBTAt MCsGCCsGAQUFBwIBFh9odHRwczovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5MBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLh20wZDvWcQ7u GYIYcpJiIf/3KSvRxzAaWVLIoGSjH+SWoBnV9Udil/VAkv8tUKWeS4RxI78yv5Kx lkbttf7YasT1TcaJuNv12qIDVhVjmkreQsMDROtv5RrgpXGG3QzL0O88jOxUw6nT CWYFgWG0LkVnfLuMuOOKDvqoaNWoXl7SFO5JcbzyJZrkpzvwN7Vadis2tP1R3uHa O5+e93UVtLUDxQBzeBE+FPZq6vdsE/6sFREqH12DDduOZ8CsJaDatK7DCCmUjLrp 9Xk+CmJq7fQ0a93u4vAunCsObzn+gu+Udt4VcwkBNDh5SrD0kNhkp3j/keJGtpXv y2xh+huX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruattimv5s8QoPtYSS0/ IzWdDI+IE4Z4iQCPdkTpqb86+BG1ESsCU3i+PE1+KewMMqZYIJo8Nd5QE8WvvlL7 YxWXkFQxXyPe9t6KyrxuTad1c1QsYsBqMkvQen0lKiYJH3VKDrBo7MMnrpZoqlJD f4Aur9PT0RfoMQ1W5UcLmdVvg2srNPGGvyK1VmQwAY5DWHkeQnvPaG7FKau28oeW ZRadeGB7aT/5AMAfwqgiXu7g99ozp9NdnjjLwEeOdw+oWYmii8qrcgcmrZC7+kC8 ezb+e5BIC1oCA+nW+dRBuT3Ra40t/RpCOORRfLBdde0UtB0pBYfB/vMx/GZQDrTU awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 146844756269307466181110770735676548902 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-21 09:48:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-21 09:48:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aristors.epizy.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22079216902030680057994465097093387174320685574516746330449229379836911698625540971186250579432561714930014343488178057445804199163559397720560400532738363953285065038151877205907046415187258400656291506656407808409713989318187091759124008766314659966599986324358257519547106922628630226096750735252875136750853845091943372215036364029547013483778232552021296249478855055162745415538556398369194810075444843736010279331406096647284261542043777918478776739463663219238724654190942429657267556868204437004161874026622304081823660582622676409975555866545105682399138720374233031733630066736666368681202888600256871978091 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0dc9829fb2e9ed1e9ef5444991524c3d99d87bfd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristors.epizy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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