kinrossworld.kinross.com
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 0f:6a:c2:c4:f6:8b:23:44 was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kinrossworld.kinross.com
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:6a:c2:c4:f6:8b:23:44Serial Number (int): 1110914409305940804
Serial Number lenght: 60 bits, 8 octets
SubjectKeyId: 80:0c:87:23:3b:7d:0c:1f:73:2c:5c:bf:7d:d9:8c:c9:39:fc:ac:1e
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): ed:d3:aa:f4:61:46:c0:0f:54:5b:a9:27:72:06:83:2c:40:5b:50:a6
Fingerprint (sha256): 15:2a:f1:9c:92:91:48:da:84:6a:4f:d8:90:b7:05:a8:97:07:cd:fb:5c:75:91:c2:ca:f8:70:8b:6e:b6:a7:17
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-590.crl
Check the revocation status for certificate kinrossworld.kinross.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kinrossworld.kinross.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kinrossworld.kinross.com
www.kinrossworld.kinross.com
www.kinrossworld.kinross.com
Other certificates including the domain name kinross.com
(limited to 100 certificates)
www.highq.com
suppliers.kinross.com
kinrossworld.kinross.com
businessservices.kinross.com
www.highq.com
kinrossworld.kinross.com
fb.kinross.com
gh-inx.kinross.com
www.highq.com
www.highq.com
*.kinross.com
www.highq.com
cwms.kinross.com
vpn4.kinross.com
webmail.kinross.com
www.highq.com
cwms.kinross.com
webmail.kinross.com
kinrossworld.kinross.com
www.highq.com
businessservices.kinross.com
www.highq.com
www.highq.com
www.highq.com
myinduction.kinross.com
sip.kinross.com
www.kinrossworld.kinross.com
www.highq.com
www.highq.com
guest.kinross.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
sip.kinross.com
workspace.kinross.com
tor-vpn.kinross.com
webmail.kinross.com
www.highq.com
us-vpn.kinross.com
www.highq.com
www.highq.com
university.kinross.com
www.highq.com
www.highq.com
webcontrol.kinross.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
aweis.kinross.com
www.highq.com
www.highq.com
www.kinrossworld.kinross.com
ca-vpn.kinross.com
www.highq.com
www.highq.com
vpn4.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
br-vpn.kinross.com
www.highq.com
autodiscover.kinross.com
www.highq.com
www.highq.com
access.cassels.com
www.highq.com
www.highq.com
www.highq.com
OCSwc.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
kr-webmail.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
vpn1.kinross.com
www.highq.com
cwms.kinross.com
www.highq.com
www.highq.com
myuniversity.kinross.com
www.highq.com
www.highq.com
www.highq.com
webcontrol.kinross.com
webmail.kinross.com
www.highq.com
suppliers.kinross.com
kinrossworld.kinross.com
businessservices.kinross.com
www.highq.com
kinrossworld.kinross.com
fb.kinross.com
gh-inx.kinross.com
www.highq.com
www.highq.com
*.kinross.com
www.highq.com
cwms.kinross.com
vpn4.kinross.com
webmail.kinross.com
www.highq.com
cwms.kinross.com
webmail.kinross.com
kinrossworld.kinross.com
www.highq.com
businessservices.kinross.com
www.highq.com
www.highq.com
www.highq.com
myinduction.kinross.com
sip.kinross.com
www.kinrossworld.kinross.com
www.highq.com
www.highq.com
guest.kinross.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
sip.kinross.com
workspace.kinross.com
tor-vpn.kinross.com
webmail.kinross.com
www.highq.com
us-vpn.kinross.com
www.highq.com
www.highq.com
university.kinross.com
www.highq.com
www.highq.com
webcontrol.kinross.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
aweis.kinross.com
www.highq.com
www.highq.com
www.kinrossworld.kinross.com
ca-vpn.kinross.com
www.highq.com
www.highq.com
vpn4.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
br-vpn.kinross.com
www.highq.com
autodiscover.kinross.com
www.highq.com
www.highq.com
access.cassels.com
www.highq.com
www.highq.com
www.highq.com
OCSwc.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
kr-webmail.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
vpn1.kinross.com
www.highq.com
cwms.kinross.com
www.highq.com
www.highq.com
myuniversity.kinross.com
www.highq.com
www.highq.com
www.highq.com
webcontrol.kinross.com
webmail.kinross.com
www.highq.com
Certificate
The complete raw certificate details for kinrossworld.kinross.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3jCCBcagAwIBAgIID2rCxPaLI0QwDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw HhcNMjMwNjE5MDg0MTUwWhcNMjQwNjE5MDg0MTUwWjAjMSEwHwYDVQQDExhraW5y b3Nzd29ybGQua2lucm9zcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPMWiRS7RU+RYLcVpyFEdyYnx+50UoOpFa4IaB/Fwicj4o/pmyJttI3eom 8hcwBaWLhvRtZ/dJfh/fyO8kPnt2KASMlgxRihD/rBrD2ntqrxM30/7KfZjFjwe4 XJumiXRkAZEj1fzzE79slsXswKjkCwziNJiq/qRXV4Q21Ea2FFkAjAh+t7AKX2mG 6IcseeK9onnGY5PK1CRChtDStwkcYj85aXWiGpWEsSdkkm7CnWuIRTFzvtemOpyZ nwDLVAKR+NAX9CjQBsqa80UVSzb+lEdy9NgrEj7U+trqyx/GaXGrke1FWKy7vGhI z/fNNwbv12pTHsuQA1+FPxPUE0v3AgMBAAGjggNwMIIDbDAMBgNVHRMBAf8EAjAA MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAw PQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5zdGFyZmllbGR0ZWNoLmNvbS9z ZmlnMnMxLTU5MC5jcmwwYwYDVR0gBFwwWjBOBgtghkgBhv1uAQcXATA/MD0GCCsG AQUFBwIBFjFodHRwOi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY29tL3Jl cG9zaXRvcnkvMAgGBmeBDAECATCBggYIKwYBBQUHAQEEdjB0MCoGCCsGAQUFBzAB hh5odHRwOi8vb2NzcC5zdGFyZmllbGR0ZWNoLmNvbS8wRgYIKwYBBQUHMAKGOmh0 dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS9z ZmlnMi5jcnQwHwYDVR0jBBgwFoAUJUWBaFAmOD07LSy+zWrZtj2zZmMwQQYDVR0R BDowOIIYa2lucm9zc3dvcmxkLmtpbnJvc3MuY29tghx3d3cua2lucm9zc3dvcmxk LmtpbnJvc3MuY29tMB0GA1UdDgQWBBSADIcjO30MH3MsXL992YzJOfysHjCCAX8G CisGAQQB1nkCBAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7D UUhZRnEftZsAAAGI0tFJ2wAABAMASDBGAiEAuOzGrhJmEZGNUe5Wa7c+CS8uweGh Lt7Ib828h6fqOY4CIQDeH7pZkqKI7wVDu+1fDyPjtA+TLr6Tag8kKee+U5M8xQB3 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiNLRSuwAAAQDAEgw RgIhAJwhMyubONY3Ay1xnir6UlT/4fOYMY3k1WT4kL6yMNrxAiEA8Jiv3GLWvGPv wP87wRwjXi4cl+/RN5ElaQAd+bNKlDcAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GE hTS9pD0wSNf7qwAAAYjS0UtbAAAEAwBGMEQCIBPIHqDXcxRT+GyVbrVRmM9v46yG ARJjKWOOnO/Vo/RXAiBbP2RGvKsx5t2BJ6zVXcqJ2poQ6b1tMFV0HLWLtYtVtTAN BgkqhkiG9w0BAQsFAAOCAQEATrXQuBzr7xmqCtn+G5T6nm1xkvpeI/CaeecSU7g0 NZDdaJlK3iiMht8ui24f9gBuQ1tZXbaLOICSrTOMVZ0GEYHKX236d80dtYNUF9iN PzqXVe2hnn7CP/u1NWpLEKWtCTgEy0/yM4eV7xdVegMNszfR4LUerbEte1HKAB2H pucT5QLjKX9kqksgsUPxnQFXnymF03t54WtyfFau6R8TejmvuLAVdeYGAIMMtLKP wssuYnqgBkJRMBo5NVICT4/dc9WZZKxQAUavwWgfRpfKDWqQF+icTxnF3hgw8H6v JaZCIjDgRgEsTkESoHL6jTdvsq6DPpqZGU46NQtOcJLUDA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzFokUu0VPkWC3FachRH cmJ8fudFKDqRWuCGgfxcInI+KP6ZsibbSN3qJvIXMAWli4b0bWf3SX4f38jvJD57 digEjJYMUYoQ/6waw9p7aq8TN9P+yn2YxY8HuFybpol0ZAGRI9X88xO/bJbF7MCo 5AsM4jSYqv6kV1eENtRGthRZAIwIfrewCl9phuiHLHnivaJ5xmOTytQkQobQ0rcJ HGI/OWl1ohqVhLEnZJJuwp1riEUxc77XpjqcmZ8Ay1QCkfjQF/Qo0AbKmvNFFUs2 /pRHcvTYKxI+1Pra6ssfxmlxq5HtRVisu7xoSM/3zTcG79dqUx7LkANfhT8T1BNL 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1110914409305940804 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 08:41:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 08:41:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kinrossworld.kinross.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26155693351136988726256254932960154819653129008943635662352150803755255999346603309708251510832408678088869632304596055965580616937305787904572768753386361275809342977520459630150552656437079187663556864239076678021076651767243146238127182114995631332576794557230131979454539058580156675260957396421108840005679210885463516026404087274600465409271654658666853757637097773734905242404313298137476539842189561465401397790071137692732553781048805996510856819616989816823250367118078185242547468083397583212443243076224867110936705414161957682184143312155787506604904502537142052264623327990437527389468516425469946711031 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-590.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinrossworld.kinross.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinrossworld.kinross.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 800c87233b7d0c1f732c5cbf7dd98cc939fcac1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004eb5d0b81cebef19aa0ad9fe1b94fa9e6d7192fa5e23f09a79e71253b8343590dd68994ade288c86df2e8b6e1ff6006e435b595db68b388092ad338c559d061181ca5f6dfa77cd1db5835417d88d3f3a9755eda19e7ec23ffbb5356a4b10a5ad093804cb4ff2338795ef17557a030db337d1e0b51eadb12d7b51ca001d87a6e713e502e3297f64aa4b20b143f19d01579f2985d37b79e16b727c56aee91f137a39afb8b01575e60600830cb4b28fc2cb2e627aa0064251301a393552024f8fdd73d59964ac500146afc1681f4697ca0d6a9017e89c4f19c5de1830f07eaf25a6422230e046012c4e4112a072fa8d376fb2ae833e9a99194e3a350b4e7092d40c