*.wish.org
- Make-A-Wish Foundation of America -
Issued by COMODO RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 0f:f3:9a:3c:73:30:47:0d:6f:fe:02:ca:c3:41:45:21 was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Make-A-Wish Foundation of America
Organization:
Make-A-Wish Foundation of America
Organization unit: National Office
Organization unit: PremiumSSL Wildcard
Organization unit: National Office
Organization unit: PremiumSSL Wildcard
Address:
4742 N. 24th St Suite 400
Postal code: 85016-4862
State / Province: Arizona
Locality: Phoenix
Country: US
Postal code: 85016-4862
State / Province: Arizona
Locality: Phoenix
Country: US
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:f3:9a:3c:73:30:47:0d:6f:fe:02:ca:c3:41:45:21Serial Number (int): 21203276353815554525089592460487771425
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 80:c4:e9:28:6c:be:03:ea:50:82:f3:ad:2e:fb:44:bf:40:46:e2:d3
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24
Fingerprint (sha1): 21:7e:4e:63:c2:83:21:76:c9:fc:d0:79:00:02:47:99:81:9d:45:c0
Fingerprint (sha256): 09:ff:32:ad:5a:2b:c9:3c:e4:84:95:d0:f5:42:4c:9c:bb:7e:e1:3a:ad:39:48:8a:e1:ea:4f:1a:8d:90:7f:51
Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate *.wish.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.wish.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.wish.org
wish.org
wish.org
Other certificates including the domain name wish.org
(limited to 100 certificates)
securedns.planmygift.org
tls.automattic.com
securedns.planmygift.org
mask2.stayclassy.org
mask2.stayclassy.org
friends.wish.org
securedns.planmygift.org
a.wish.org
mask2.stayclassy.org
securedns.planmygift.org
secure2.wish.org
newsletter.arizona.wish.org
*.wish.org
securedns.planmygift.org
*.wish.org
tls.automattic.com
a.wish.org
tls.automattic.com
securedns.planmygift.org
securedns.planmygift.org
remotenebraska.wish.org
i.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
mask2.stayclassy.org
newsletter.arizona.wish.org
securedns.planmygift.org
securedns.planmygift.org
a.wish.org
securedns.planmygift.org
a.wish.org
tls.automattic.com
a.wish.org
securedns.planmygift.org
*.wish.org
mail.akwa.wish.org
i.wish.org
mail.maine.wish.org
securedns.planmygift.org
a.wish.org
wish.org
securedns.planmygift.org
a.wish.org
securedns.planmygift.org
mask2.stayclassy.org
*.wish.org
remotemail.neny.wish.org
friends.nh.wish.org
wish.org
securedns.planmygift.org
securedns.planmygift.org
sts.mawcolo.wish.org
securedns.planmygift.org
friends.nh.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
newsletter.arizona.wish.org
san-10-s11.tlsprovisioning.exacttarget.com
extranet.akwa.wish.org
wish.org
secure2.wish.org
secure2.wish.org
mask2.stayclassy.org
securedns.planmygift.org
mail.wish.org
mask2.stayclassy.org
securedns.planmygift.org
a.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
i.wish.org
newsletter.arizona.wish.org
wishesinflight.akwa.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
a.wish.org
san-10-s11.tlsprovisioning.exacttarget.com
i.wish.org
*.wish.org
a.wish.org
mask2.stayclassy.org
remote.maine.wish.org
a.wish.org
securedns.planmygift.org
*.metrony.wish.org
securedns.planmygift.org
newsletter.arizona.wish.org
newsletter.arizona.wish.org
mail.akwa.wish.org
wishesinflight.akwa.wish.org
mask2.stayclassy.org
*.wish.org
securedns.planmygift.org
tls.automattic.com
securedns.planmygift.org
tls.automattic.com
securedns.planmygift.org
mask2.stayclassy.org
mask2.stayclassy.org
friends.wish.org
securedns.planmygift.org
a.wish.org
mask2.stayclassy.org
securedns.planmygift.org
secure2.wish.org
newsletter.arizona.wish.org
*.wish.org
securedns.planmygift.org
*.wish.org
tls.automattic.com
a.wish.org
tls.automattic.com
securedns.planmygift.org
securedns.planmygift.org
remotenebraska.wish.org
i.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
mask2.stayclassy.org
newsletter.arizona.wish.org
securedns.planmygift.org
securedns.planmygift.org
a.wish.org
securedns.planmygift.org
a.wish.org
tls.automattic.com
a.wish.org
securedns.planmygift.org
*.wish.org
mail.akwa.wish.org
i.wish.org
mail.maine.wish.org
securedns.planmygift.org
a.wish.org
wish.org
securedns.planmygift.org
a.wish.org
securedns.planmygift.org
mask2.stayclassy.org
*.wish.org
remotemail.neny.wish.org
friends.nh.wish.org
wish.org
securedns.planmygift.org
securedns.planmygift.org
sts.mawcolo.wish.org
securedns.planmygift.org
friends.nh.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
newsletter.arizona.wish.org
san-10-s11.tlsprovisioning.exacttarget.com
extranet.akwa.wish.org
wish.org
secure2.wish.org
secure2.wish.org
mask2.stayclassy.org
securedns.planmygift.org
mail.wish.org
mask2.stayclassy.org
securedns.planmygift.org
a.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
i.wish.org
newsletter.arizona.wish.org
wishesinflight.akwa.wish.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
a.wish.org
san-10-s11.tlsprovisioning.exacttarget.com
i.wish.org
*.wish.org
a.wish.org
mask2.stayclassy.org
remote.maine.wish.org
a.wish.org
securedns.planmygift.org
*.metrony.wish.org
securedns.planmygift.org
newsletter.arizona.wish.org
newsletter.arizona.wish.org
mail.akwa.wish.org
wishesinflight.akwa.wish.org
mask2.stayclassy.org
*.wish.org
securedns.planmygift.org
tls.automattic.com
securedns.planmygift.org
Certificate
The complete raw certificate details for *.wish.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIQD/OaPHMwRw1v/gLKw0FFITANBgkqhkiG9w0BAQsFADCB ljELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPDA6BgNV BAMTM0NPTU9ETyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0xNTA0MjkwMDAwMDBaFw0xNzAzMDgyMzU5NTlaMIHjMQswCQYD VQQGEwJVUzETMBEGA1UEERMKODUwMTYtNDg2MjEQMA4GA1UECBMHQXJpem9uYTEQ MA4GA1UEBxMHUGhvZW5peDEiMCAGA1UECRMZNDc0MiBOLiAyNHRoIFN0IFN1aXRl IDQwMDEqMCgGA1UEChMhTWFrZS1BLVdpc2ggRm91bmRhdGlvbiBvZiBBbWVyaWNh MRgwFgYDVQQLEw9OYXRpb25hbCBPZmZpY2UxHDAaBgNVBAsTE1ByZW1pdW1TU0wg V2lsZGNhcmQxEzARBgNVBAMUCioud2lzaC5vcmcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIVjJgkAqUmud3c3ZlSScL0JACDl3ZtZcWsOL26XdyYJM4 FEH+Sp7T+ub9gYnHI6X92UC6pwx/SXGxQtjDbrSeRoSRWiJStO03mhRnnilomd5h aZufdoKF1dx6e5URKJYpalXskZJdOSYC/UkP/ow82JoGAslnkTg2lE006Jd5vlWX 9qvI7EGp5fGYWrODk99p5L+Rsz9p5TlTXi5pp0x5+dgQEOaSJ4FtrfrnSa4OPc9I gpDHdKVqEMQOt1G6wwfSuwzWG8BnloxcalwCipXC18ZIY/tvT96Wda1Z/1AdE2lI 00UK7otS9fWMudWQCQmyS7C/A1UFU13XHy3JWUvrAgMBAAGjggHeMIIB2jAfBgNV HSMEGDAWgBSa8yvaz61Pti+7KkhIKhK3G0LBJDAdBgNVHQ4EFgQUgMTpKGy+A+pQ gvOtLvtEv0BG4tMwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFAGA1UdIARJMEcwOwYMKwYBBAGyMQEC AQMEMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BT MAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLmNvbW9kb2Nh LmNvbS9DT01PRE9SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVy Q0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQu Y29tb2RvY2EuY29tL0NPTU9ET1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1 cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2Nh LmNvbTAfBgNVHREEGDAWggoqLndpc2gub3Jnggh3aXNoLm9yZzANBgkqhkiG9w0B AQsFAAOCAQEAQF1c1x5MK/oFkmMYr+f8XA325+/ScsUSklZ1cfFjRFepzNQVBrbS e1DhrEGOCUmK4co01Ot9AOCd7OTVWs9C5t+mNP6ViIXXhGWaKPXA6gM0bsmxauxg 7f1wa2ATanIo7hpjd9BRYx8zLjqSUOhrvYxx9NBLZk4Sw7OkTfx+wwxP8NSbX66d b9K+9bi5msv3QEVxoDh51jf3Yl+dN3uf3wVs/vMRZqZnK6uFEDVeBiFaSd1639qh 4KMwDyYZ9z8JOgSemroaAuLfIOvIY+idj1TxDBO0vNujCBwj4Ysj9GiZmcPvYEqt 0b0pTisgRk/iOvs+tyEHVPIE3CZU/REsug== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFYyYJAKlJrnd3N2ZUkn C9CQAg5d2bWXFrDi9ul3cmCTOBRB/kqe0/rm/YGJxyOl/dlAuqcMf0lxsULYw260 nkaEkVoiUrTtN5oUZ54paJneYWmbn3aChdXcenuVESiWKWpV7JGSXTkmAv1JD/6M PNiaBgLJZ5E4NpRNNOiXeb5Vl/aryOxBqeXxmFqzg5PfaeS/kbM/aeU5U14uaadM efnYEBDmkieBba3650muDj3PSIKQx3SlahDEDrdRusMH0rsM1hvAZ5aMXGpcAoqV wtfGSGP7b0/elnWtWf9QHRNpSNNFCu6LUvX1jLnVkAkJskuwvwNVBVNd1x8tyVlL 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21203276353815554525089592460487771425 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '85016-4862' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Phoenix' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4742 N. 24th St Suite 400' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Make-A-Wish Foundation of America' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Office' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PremiumSSL Wildcard' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.wish.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25290166212544672934014799784195460000166957059738308545928374484863879472480375741147866627076809388753233975074513151316248164813772656835291955554855487584770208217921118978239034729820324169308702748792042417094268633817135339356404594093972733679425941530522586116804353230497262453455112135911438472934356879686348199093681952310102535426525463250050095143654323286636904499425016433298427389602582280193019211991990590289826579145991547779888059997013289084014559095207824333604542098890759171372718739998043550329668302320278528601608569628072730734609770923927442463173981944054788448488856085318633357134827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 80c4e9286cbe03ea5082f3ad2efb44bf4046e2d3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wish.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wish.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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