*.almosafer.com
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 5e:73:f3:6f:5f:d5:80:45:33:f2:1c:d2:21:ff:3b:27 was issued on by SSL Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.almosafer.com
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 5e:73:f3:6f:5f:d5:80:45:33:f2:1c:d2:21:ff:3b:27Serial Number (int): 125549483192032506541577294682404109095
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: c2:37:be:28:10:f6:f6:43:8c:02:90:17:ac:71:04:4e:23:07:d9:91
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): cd:8b:89:83:8b:e4:00:e3:f7:7e:a7:d9:0f:88:00:d4:bc:27:c7:08
Fingerprint (sha256): 17:44:52:a6:f1:85:96:9d:c5:69:44:28:b1:14:47:a0:8d:df:1f:bf:3a:3a:2f:72:cd:7f:0f:65:a4:53:e6:6c
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate *.almosafer.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.almosafer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.almosafer.com
almosafer.com
almosafer.com
Other certificates including the domain name almosafer.com
(limited to 100 certificates)
www.jobs.almosafer.com
tsunilrao.com
cosasdeadministracion.co
link.email.almosafer.com
web-cms-strapi-prod-apps.almosafer.com
next-preprod-kw.almosafer.com
19035924.email.almosafer.com
www.raltech.in
alexzhovnir.com
almosafer.com
19035924.mktg.almosafer.com
links.email.almosafer.com
ar-manual.business.almosafer.com
protonlabs.io
*.almosafer.com
www.richardwillems.com
www.hackkosice.com
tajawal.com
agentline.app
sni.cloudflaressl.com
tajawal.com
sa.almosafer.com
mindscopetech.app
sandbox.byhook.com
noiremarche.com
6519114.automated.almosafer.com
*.almosafer.com
incapsula.com
link.mktg.almosafer.com
book.almosafer.com
codeaf.dev
morse.stevemaguire.dev
qa.almosafer.com
sni.cloudflaressl.com
sa.almosafer.com
dev.atomtech.cc
feedback.almosafer.com
links.email.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
*.almosafer.com
footballprenup.com
www.giggee.com
tajawal.com
www.artkom.dev
app.rogueland.eventup.ro
cms-api-dev.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
refilingindiaadmin.estore.business
www.kanagrid.com
tajawal.com
cms-api.almosafer.com
next-preprod-sa.almosafer.com
sni.cloudflaressl.com
next-preprod-bh.almosafer.com
ablink.mktg.almosafer.com
app.floraum.co.kr
web-cms-strapi-dev.almosafer.com
incapsula.com
19035924.mktg.almosafer.com
business-dev.almosafer.com
almosafer.com
tajawal.com
ablink.mktg.almosafer.com
tajawal.com
flightstatus.stgairasia.com
business.almosafer.com
ae.almosafer.com
6519114.mktg.almosafer.com
app.almosafer.com
app.almosafer.com
sni.cloudflaressl.com
ridhhisidhhimartadmin.estore.business
bh.almosafer.com
www.jobs.almosafer.com
sni.cloudflaressl.com
next-preprod.almosafer.com
bo.clubup.it
oktoberfest.thepub.com.co
*.almosafer.com
secur.dev.assek.ca
sni.cloudflaressl.com
tajawal.com
kw.almosafer.com
next-dev-qa.almosafer.com
next-staging-qa.almosafer.com
svmjasrana.up-sl.in
business-dev.almosafer.com
sni.cloudflaressl.com
incapsula.com
tajawal.com
*.almosafer.com
business.almosafer.com
next-staging-ae.almosafer.com
host.almosafer.com
almosafer.com
alexzhovnir.com
19035924.loyalty.almosafer.com
*.next-dev.tajawal.com
tsunilrao.com
cosasdeadministracion.co
link.email.almosafer.com
web-cms-strapi-prod-apps.almosafer.com
next-preprod-kw.almosafer.com
19035924.email.almosafer.com
www.raltech.in
alexzhovnir.com
almosafer.com
19035924.mktg.almosafer.com
links.email.almosafer.com
ar-manual.business.almosafer.com
protonlabs.io
*.almosafer.com
www.richardwillems.com
www.hackkosice.com
tajawal.com
agentline.app
sni.cloudflaressl.com
tajawal.com
sa.almosafer.com
mindscopetech.app
sandbox.byhook.com
noiremarche.com
6519114.automated.almosafer.com
*.almosafer.com
incapsula.com
link.mktg.almosafer.com
book.almosafer.com
codeaf.dev
morse.stevemaguire.dev
qa.almosafer.com
sni.cloudflaressl.com
sa.almosafer.com
dev.atomtech.cc
feedback.almosafer.com
links.email.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
*.almosafer.com
footballprenup.com
www.giggee.com
tajawal.com
www.artkom.dev
app.rogueland.eventup.ro
cms-api-dev.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
refilingindiaadmin.estore.business
www.kanagrid.com
tajawal.com
cms-api.almosafer.com
next-preprod-sa.almosafer.com
sni.cloudflaressl.com
next-preprod-bh.almosafer.com
ablink.mktg.almosafer.com
app.floraum.co.kr
web-cms-strapi-dev.almosafer.com
incapsula.com
19035924.mktg.almosafer.com
business-dev.almosafer.com
almosafer.com
tajawal.com
ablink.mktg.almosafer.com
tajawal.com
flightstatus.stgairasia.com
business.almosafer.com
ae.almosafer.com
6519114.mktg.almosafer.com
app.almosafer.com
app.almosafer.com
sni.cloudflaressl.com
ridhhisidhhimartadmin.estore.business
bh.almosafer.com
www.jobs.almosafer.com
sni.cloudflaressl.com
next-preprod.almosafer.com
bo.clubup.it
oktoberfest.thepub.com.co
*.almosafer.com
secur.dev.assek.ca
sni.cloudflaressl.com
tajawal.com
kw.almosafer.com
next-dev-qa.almosafer.com
next-staging-qa.almosafer.com
svmjasrana.up-sl.in
business-dev.almosafer.com
sni.cloudflaressl.com
incapsula.com
tajawal.com
*.almosafer.com
business.almosafer.com
next-staging-ae.almosafer.com
host.almosafer.com
almosafer.com
alexzhovnir.com
19035924.loyalty.almosafer.com
*.next-dev.tajawal.com
Certificate
The complete raw certificate details for *.almosafer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsDCCA5igAwIBAgIQXnPzb1/VgEUz8hzSIf87JzANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTI0MDQzMDEyNTMzMVoXDTI1MDUzMTEyNTMzMVowGjEYMBYG A1UEAwwPKi5hbG1vc2FmZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAz8xaT0gRIGwUDr7ANFxv6HF0+QIp5XCeSrhPvCYGxso6lkm7PMIdqT2Z GQicTWbO4QXwQfMvP2EAmvMa7K6zlqIk1kT06wGE+e34mQ/n5RjXSuMclzXkw6mT VPGZdRLmfnlHAGEud6UA4QOJ/c4OOi3NVX9yPOJKRruC/fmsoW84tqATTYl0IOkI 11HzsD94g0p+IzvZvbNwHihMSNOiYPLl5L0GXHH3VAjJ1jAr0Oq+JwqRxv2Cnd2S cioK4zVBbAdnwsUuqKP4vv9TAvpbkNcQ+8f2sNrynZkhZip2vmJoP/Bm5c6YWCzD ZPGGPIvWt02me1EmNs6bPedffkzsBQIDAQABo4IBoTCCAZ0wDAYDVR0TAQH/BAIw ADAfBgNVHSMEGDAWgBQmFH7g3Nem9+LUBCffYfHC7OcyyjByBggrBgEFBQcBAQRm MGQwQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0LnNzbC5jb20vU1NMY29tLVN1YkNB LVNTTC1SU0EtNDA5Ni1SMS5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6Ly9vY3Nwcy5z c2wuY29tMCkGA1UdEQQiMCCCDyouYWxtb3NhZmVyLmNvbYINYWxtb3NhZmVyLmNv bTAjBgNVHSAEHDAaMAgGBmeBDAECATAOBgwrBgEEAYKpMAEDAQEwHQYDVR0lBBYw FAYIKwYBBQUHAwIGCCsGAQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9j cmxzLnNzbC5jb20vU1NMY29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwHQYD VR0OBBYEFMI3vigQ9vZDjAKQF6xxBE4jB9mRMA4GA1UdDwEB/wQEAwIFoDATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAYU4LNkUdRv0ZiCQ2 qNAPfmP42tdrVJEAfBrhuO3WX3tC/nplIrsDq2DDriM9MJyq235QSBG+DOwA6CHz gSyDCMf+tIzbTbpx7fg/zDltilCl1bQIQfg+ffo6DXrAf1SLNun+p1raKkQQqurA 1zb7V9d8zEht74Z8gQYdvgzRGq+wb5UOs2AJC09GYyRsoMWWpa40zfWrWtmj7rjW EA8Ioh6QWNivZ1JSasgAdtHIqst6DCu64ftymy47uvM1tb5fjmnUWujUq9XO65oM Ulr5oUROC5au8J9wTPq+PopbiBQ2JVALO36GaOttxDKQ7edMvke8fc7UGuvT34xC +B7JJ5IVQOP5r46nll5GNcqEPPf6OAQ6UKIF2/0lOciBbYVnCxW66LlcxeCBv1px PgyKopCUSlX9PWj02kOp6R1aNCdQTuciPQujFDFskFeAFRZgQobDwpijmOiI2Ed7 rRn1APe2cX+Dhj5xX4dSJcHSQLXfzB8rYPDs0D8OLJT2WAYM3F95suDWJaCY0p8f 4tDiqj2E0PWE2hF3vQhtrgmZV5NdFaxePVHG3d++klSrcvQ1U4h13H/u77jeV6uJ HbhW7ZmXDwMpy0LT43os3SFvTVBbwq4CPGuqvLPEK4hRM+ZrbtQwjFWgygVntFlu hk6EWjwQyTVO6aaoxSby+VC+vKE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8xaT0gRIGwUDr7ANFxv 6HF0+QIp5XCeSrhPvCYGxso6lkm7PMIdqT2ZGQicTWbO4QXwQfMvP2EAmvMa7K6z lqIk1kT06wGE+e34mQ/n5RjXSuMclzXkw6mTVPGZdRLmfnlHAGEud6UA4QOJ/c4O Oi3NVX9yPOJKRruC/fmsoW84tqATTYl0IOkI11HzsD94g0p+IzvZvbNwHihMSNOi YPLl5L0GXHH3VAjJ1jAr0Oq+JwqRxv2Cnd2ScioK4zVBbAdnwsUuqKP4vv9TAvpb kNcQ+8f2sNrynZkhZip2vmJoP/Bm5c6YWCzDZPGGPIvWt02me1EmNs6bPedffkzs BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 125549483192032506541577294682404109095 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 12:53:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 12:53:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.almosafer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26232099235718957891396628182760797544136101002412840870450888143232590624101937100296779961648106340748584897874901252482409002066853342928095940932644267794113696286164029230075036218401883332304499264932314145795946690165960005776519888759711380197704383573021666624062777787902397497334325972245085861540330832465480938850243537915156161143949822636981270959885291003961405637897318472951235199110559432885361543171631734905710971315881904808721845296619632864209314184717804581785435063754091523484949442701323055142884959153730714230519969183422842767002994785913957199367654216010295254531580333997547185826821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almosafer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almosafer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c237be2810f6f6438c029017ac71044e2307d991 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00614e0b36451d46fd19882436a8d00f7e63f8dad76b5491007c1ae1b8edd65f7b42fe7a6522bb03ab60c3ae233d309caadb7e504811be0cec00e821f3812c8308c7feb48cdb4dba71edf83fcc396d8a50a5d5b40841f83e7dfa3a0d7ac07f548b36e9fea75ada2a4410aaeac0d736fb57d77ccc486def867c81061dbe0cd11aafb06f950eb360090b4f4663246ca0c596a5ae34cdf5ab5ad9a3eeb8d6100f08a21e9058d8af6752526ac80076d1c8aacb7a0c2bbae1fb729b2e3bbaf335b5be5f8e69d45ae8d4abd5ceeb9a0c525af9a1444e0b96aef09f704cfabe3e8a5b88143625500b3b7e8668eb6dc43290ede74cbe47bc7dced41aebd3df8c42f81ec927921540e3f9af8ea7965e4635ca843cf7fa38043a50a205dbfd2539c8816d85670b15bae8b95cc5e081bf5a713e0c8aa290944a55fd3d68f4da43a9e91d5a3427504ee7223d0ba314316c9057801516604286c3c298a398e888d8477bad19f500f7b6717f83863e715f875225c1d240b5dfcc1f2b60f0ecd03f0e2c94f658060cdc5f79b2e0d625a098d29f1fe2d0e2aa3d84d0f584da1177bd086dae099957935d15ac5e3d51c6dddfbe9254ab72f435538875dc7feeefb8de57ab891db856ed99970f0329cb42d3e37a2cdd216f4d505bc2ae023c6baabcb3c42b885133e66b6ed4308c55a0ca0567b4596e864e845a3c10c9354ee9a6a8c526f2f950bebca1