onculture.rcmusic.ca
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 71:e0:9d:56:7a:18:06:92:7e:f6:65:11 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=onculture.rcmusic.ca,OU=Domain Control Validated by OneClickSSL,C=US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 71:e0:9d:56:7a:18:06:92:7e:f6:65:11Serial Number (int): 35243348500161259672687764753
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: ee:b9:29:b4:ad:86:b3:63:c5:07:d6:97:e9:9e:b3:eb:ec:a8:bf:4f
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): 63:79:c6:8a:60:2f:7f:a2:08:f1:f7:ac:40:f1:3e:73:fa:a5:84:15
Fingerprint (sha256): 04:87:bb:9c:69:e0:17:ad:c8:3b:12:11:3f:85:7d:97:fe:67:57:06:3a:79:ed:f1:93:d7:78:3f:92:31:0b:3b
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate onculture.rcmusic.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for onculture.rcmusic.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
onculture.rcmusic.ca
www.onculture.rcmusic.ca
www.onculture.rcmusic.ca
Other certificates including the domain name rcmusic.ca
(limited to 100 certificates)
ssl392249.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
bookstore.rcmusic.ca
onculture.rcmusic.ca
tickets.rcmusic.ca
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.exclusive.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
www.rcmusic.ca
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
*.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
*.exclusive.rcmusic.ca
*.exclusive.rcmusic.ca
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
register.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
lms.dev.aws.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
tickets.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392247.cloudflaressl.com
bookstore.rcmusic.ca
onculture.rcmusic.ca
tickets.rcmusic.ca
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.exclusive.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
www.rcmusic.ca
ssl392247.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
*.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
*.exclusive.rcmusic.ca
*.exclusive.rcmusic.ca
acquia-sites.com
ssl392248.cloudflaressl.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
register.rcmusic.ca
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
lms.dev.aws.rcmusic.ca
acquia-sites.com
ssl392247.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
sni.cloudflaressl.com
ssl392248.cloudflaressl.com
ssl392249.cloudflaressl.com
ssl392248.cloudflaressl.com
acquia-sites.com
tickets.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
ssl392249.cloudflaressl.com
ssl392249.cloudflaressl.com
webmail.rcmusic.ca
ssl392248.cloudflaressl.com
acquia-sites.com
ssl392249.cloudflaressl.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
Certificate
The complete raw certificate details for onculture.rcmusic.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIMceCdVnoYBpJ+9mURMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE2MDkxODA1NTIwOVoXDTE3MDkx OTA1NTIwOVowXjELMAkGA1UEBhMCVVMxMDAuBgNVBAsTJ0RvbWFpbiBDb250cm9s IFZhbGlkYXRlZCBieSBPbmVDbGlja1NTTDEdMBsGA1UEAxMUb25jdWx0dXJlLnJj bXVzaWMuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65DENIibq lOB/g+n8IGdwfxfOK+8GiL770/esoxC5kv7PAAJFdgGbs8R70+p8uyXqQm2vlIaO gX9x2G1KyxR4C4qDKFWD74MrkB1Ji2yvyWfQYzHbDTfWQo04e591gcWNU6fGLbOO LxtwmoLnoa8LjV9EYp0a5+8g1OzZgDKSswM0ETNdnOp7rOY5XQ6SdlBM7vlIGJ+F Vd/8ABG9hH3waUI/Bu6oQWzr0YllGyR6052x4inkHwzM5rQ6gnUYTp8jgRKkH3qt AuW0axq5Oy0AbcShmJgxl8lBoLs5p0gDxvT+z+1cf4pG2jw/RmZrhXKmQcqqgJ2C kHPGtYEiYoTJAgMBAAGjggHzMIIB7zAOBgNVHQ8BAf8EBAMCBaAwgYkGCCsGAQUF BwEBBH0wezBCBggrBgEFBQcwAoY2aHR0cDovL3NlY3VyZTIuYWxwaGFzc2wuY29t L2NhY2VydC9nc2FscGhhc2hhMmcycjEuY3J0MDUGCCsGAQUFBzABhilodHRwOi8v b2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3NhbHBoYXNoYTJnMjBXBgNVHSAEUDBOMEIG CisGAQQBoDIBCgowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2ln bi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwPgYDVR0fBDcw NTAzoDGgL4YtaHR0cDovL2NybDIuYWxwaGFzc2wuY29tL2dzL2dzYWxwaGFzaGEy ZzIuY3JsMDkGA1UdEQQyMDCCFG9uY3VsdHVyZS5yY211c2ljLmNhghh3d3cub25j dWx0dXJlLnJjbXVzaWMuY2EwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MB0GA1UdDgQWBBTuuSm0rYazY8UH1pfpnrPr7Ki/TzAfBgNVHSMEGDAWgBT1zdU8 CFD5ak86t5faVoPmadJo9zATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEAsFCyXbFjKR5icKSZdqnEwSjr/aUjsjj/rYebzCOVjGxktvx0yVTU EWdLM5DkySn/2kMmBULLfe82Sy1MtONKX4yDisGEAMe91IUTb/4zCW1NlgTovop3 UOKjpyeHpKeDkStY49XXT2t9ZYEmCMpwTnv6qRIGFq5q9zoWGBtv4u0Eia6WdYDn SZJDrVUxWN/YwmiagJYCBOMwQP6LagGIEZyUx27qovgLjjEHG24SXF5fSfmOODUX PuLP6Yr+7ewxG5TeUJZSMg32Z9hJ35DeZgd6RY4uz9BUQ5wCoOruiMU0Zu1I0+LG bdU3WlmK7N6ndGaVdGV/fGSAATPzTICDGQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuQxDSIm6pTgf4Pp/CBn cH8XzivvBoi++9P3rKMQuZL+zwACRXYBm7PEe9PqfLsl6kJtr5SGjoF/cdhtSssU eAuKgyhVg++DK5AdSYtsr8ln0GMx2w031kKNOHufdYHFjVOnxi2zji8bcJqC56Gv C41fRGKdGufvINTs2YAykrMDNBEzXZzqe6zmOV0OknZQTO75SBifhVXf/AARvYR9 8GlCPwbuqEFs69GJZRsketOdseIp5B8MzOa0OoJ1GE6fI4ESpB96rQLltGsauTst AG3EoZiYMZfJQaC7OadIA8b0/s/tXH+KRto8P0Zma4VypkHKqoCdgpBzxrWBImKE yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 35243348500161259672687764753 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-18 05:52:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-19 05:52:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onculture.rcmusic.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23592850198807849129576182148997756408196505898949434377919872926040188162911550842375491498763565327108948985123464475752546263036222824166879493609101685821603009243503211508670020930869487111286446792483274260617376803101283133610021550249743801759683854492126668352952921213139992173693212844973402082525959951515871206180437493527410475233693228979696205421382491454712027152603591187368564555637867828438515266944559350342972073091076041079686329243755850822148741477403136159980468204560408625054240459506695393592464075502806261831883828140964068670455554467690688697011868364651761554831513376772107144430793 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onculture.rcmusic.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onculture.rcmusic.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eeb929b4ad86b363c507d697e99eb3ebeca8bf4f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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