*.almosafer.com
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 15:cf:45:c1:8f:4c:57:a0:b2:db:b4:07:77:08:bb:85 was issued on by SSL Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.almosafer.com
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 15:cf:45:c1:8f:4c:57:a0:b2:db:b4:07:77:08:bb:85Serial Number (int): 28990008182846608445356379720745794437
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 88:aa:02:5d:05:72:70:57:6d:3a:b4:af:28:f5:ad:4d:56:92:06:80
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): 3c:cf:af:50:85:5f:d8:ec:4a:a1:b3:b5:4f:4a:30:8f:a2:3e:1d:af
Fingerprint (sha256): 18:7d:75:aa:bc:b4:ef:1b:38:c8:df:ac:72:d7:cb:c2:82:cc:d0:a5:09:a6:17:63:7d:91:61:6f:95:be:94:9f
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate *.almosafer.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.almosafer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.almosafer.com
almosafer.com
almosafer.com
Other certificates including the domain name almosafer.com
(limited to 100 certificates)
www.jobs.almosafer.com
tsunilrao.com
cosasdeadministracion.co
link.email.almosafer.com
web-cms-strapi-prod-apps.almosafer.com
next-preprod-kw.almosafer.com
19035924.email.almosafer.com
www.raltech.in
alexzhovnir.com
almosafer.com
19035924.mktg.almosafer.com
links.email.almosafer.com
ar-manual.business.almosafer.com
protonlabs.io
*.almosafer.com
www.richardwillems.com
www.hackkosice.com
tajawal.com
agentline.app
sni.cloudflaressl.com
tajawal.com
sa.almosafer.com
mindscopetech.app
sandbox.byhook.com
noiremarche.com
6519114.automated.almosafer.com
*.almosafer.com
incapsula.com
link.mktg.almosafer.com
book.almosafer.com
codeaf.dev
morse.stevemaguire.dev
qa.almosafer.com
sni.cloudflaressl.com
sa.almosafer.com
dev.atomtech.cc
feedback.almosafer.com
links.email.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
*.almosafer.com
footballprenup.com
www.giggee.com
tajawal.com
app.rogueland.eventup.ro
cms-api-dev.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
refilingindiaadmin.estore.business
www.kanagrid.com
tajawal.com
cms-api.almosafer.com
next-preprod-sa.almosafer.com
sni.cloudflaressl.com
next-preprod-bh.almosafer.com
ablink.mktg.almosafer.com
app.floraum.co.kr
web-cms-strapi-dev.almosafer.com
incapsula.com
19035924.mktg.almosafer.com
business-dev.almosafer.com
almosafer.com
tajawal.com
ablink.mktg.almosafer.com
tajawal.com
flightstatus.stgairasia.com
business.almosafer.com
ae.almosafer.com
6519114.mktg.almosafer.com
app.almosafer.com
app.almosafer.com
sni.cloudflaressl.com
ridhhisidhhimartadmin.estore.business
bh.almosafer.com
www.jobs.almosafer.com
sni.cloudflaressl.com
next-preprod.almosafer.com
bo.clubup.it
oktoberfest.thepub.com.co
*.almosafer.com
secur.dev.assek.ca
sni.cloudflaressl.com
tajawal.com
kw.almosafer.com
next-dev-qa.almosafer.com
next-staging-qa.almosafer.com
svmjasrana.up-sl.in
business-dev.almosafer.com
sni.cloudflaressl.com
incapsula.com
tajawal.com
*.almosafer.com
business.almosafer.com
next-staging-ae.almosafer.com
host.almosafer.com
almosafer.com
alexzhovnir.com
19035924.loyalty.almosafer.com
*.next-dev.tajawal.com
next-preprod-ae.almosafer.com
tsunilrao.com
cosasdeadministracion.co
link.email.almosafer.com
web-cms-strapi-prod-apps.almosafer.com
next-preprod-kw.almosafer.com
19035924.email.almosafer.com
www.raltech.in
alexzhovnir.com
almosafer.com
19035924.mktg.almosafer.com
links.email.almosafer.com
ar-manual.business.almosafer.com
protonlabs.io
*.almosafer.com
www.richardwillems.com
www.hackkosice.com
tajawal.com
agentline.app
sni.cloudflaressl.com
tajawal.com
sa.almosafer.com
mindscopetech.app
sandbox.byhook.com
noiremarche.com
6519114.automated.almosafer.com
*.almosafer.com
incapsula.com
link.mktg.almosafer.com
book.almosafer.com
codeaf.dev
morse.stevemaguire.dev
qa.almosafer.com
sni.cloudflaressl.com
sa.almosafer.com
dev.atomtech.cc
feedback.almosafer.com
links.email.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
*.almosafer.com
footballprenup.com
www.giggee.com
tajawal.com
app.rogueland.eventup.ro
cms-api-dev.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
refilingindiaadmin.estore.business
www.kanagrid.com
tajawal.com
cms-api.almosafer.com
next-preprod-sa.almosafer.com
sni.cloudflaressl.com
next-preprod-bh.almosafer.com
ablink.mktg.almosafer.com
app.floraum.co.kr
web-cms-strapi-dev.almosafer.com
incapsula.com
19035924.mktg.almosafer.com
business-dev.almosafer.com
almosafer.com
tajawal.com
ablink.mktg.almosafer.com
tajawal.com
flightstatus.stgairasia.com
business.almosafer.com
ae.almosafer.com
6519114.mktg.almosafer.com
app.almosafer.com
app.almosafer.com
sni.cloudflaressl.com
ridhhisidhhimartadmin.estore.business
bh.almosafer.com
www.jobs.almosafer.com
sni.cloudflaressl.com
next-preprod.almosafer.com
bo.clubup.it
oktoberfest.thepub.com.co
*.almosafer.com
secur.dev.assek.ca
sni.cloudflaressl.com
tajawal.com
kw.almosafer.com
next-dev-qa.almosafer.com
next-staging-qa.almosafer.com
svmjasrana.up-sl.in
business-dev.almosafer.com
sni.cloudflaressl.com
incapsula.com
tajawal.com
*.almosafer.com
business.almosafer.com
next-staging-ae.almosafer.com
host.almosafer.com
almosafer.com
alexzhovnir.com
19035924.loyalty.almosafer.com
*.next-dev.tajawal.com
next-preprod-ae.almosafer.com
Certificate
The complete raw certificate details for *.almosafer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsDCCA5igAwIBAgIQFc9FwY9MV6Cy27QHdwi7hTANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTI0MDQzMDEzMjMzMVoXDTI1MDUzMTEzMjMzMVowGjEYMBYG A1UEAwwPKi5hbG1vc2FmZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzLNPT3gNltu/n97uQ+rlNOQkmHgTPbmc0oLR2LjMXhDI6PzHQ+McGng7 eNFVbNyN4VPkCKFQUJdgiGpyEWYREb9VuhfGGHd9jk39cgNcb9Je34KWBPT6ykCW Ak5eg2RxT0J1HG6UTW+Gs70z12bI9D0nDYKYEJskYJOZm+5u+S2n6GjZldnLWlvD OqUMpVWAIuLg3Sn0tsGmtU2g7z0GJyOP1L3Wlh0YNZho9Jimm6o4Gu9g/cVVdZrE aG+cy26pM0K1x/wrru4c4tD1zjqVIKVqwg2Hk0qZPXZGbgbcNoXntH1Yf7W3XCcG JpnCKxBzzUnJw+U03hmr5NwphkC+QQIDAQABo4IBoTCCAZ0wDAYDVR0TAQH/BAIw ADAfBgNVHSMEGDAWgBQmFH7g3Nem9+LUBCffYfHC7OcyyjByBggrBgEFBQcBAQRm MGQwQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0LnNzbC5jb20vU1NMY29tLVN1YkNB LVNTTC1SU0EtNDA5Ni1SMS5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6Ly9vY3Nwcy5z c2wuY29tMCkGA1UdEQQiMCCCDyouYWxtb3NhZmVyLmNvbYINYWxtb3NhZmVyLmNv bTAjBgNVHSAEHDAaMAgGBmeBDAECATAOBgwrBgEEAYKpMAEDAQEwHQYDVR0lBBYw FAYIKwYBBQUHAwIGCCsGAQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9j cmxzLnNzbC5jb20vU1NMY29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwHQYD VR0OBBYEFIiqAl0FcnBXbTq0ryj1rU1WkgaAMA4GA1UdDwEB/wQEAwIFoDATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAJoJh0/MEHl4Ih4av hGiXRjkE4o6zBAoeFjAhtmZ3kOL4eMSVGc90hiEkojhontcZwSR32WMeLlKjfNZl L32l1L1+MMZ0oEmR66l0klhE15SXljWMppM6tlUwCcBIwsC57xNRzi3c39dqfgEa fwmGj93zprTsu2/DtIdu7tWbxRClKbRcZX7u4u9DXV4UkwaYWohxwiMSfG82F7Uq cFkrfo/LDAQo1I10HzYEAeXQkBfLfkp05vwPuFg+AFyOf3jJolCGM47VzNy+oTUh 7VH/7Q3aj5hiT7OHqJ5gr2HsIYWv9bs6u2an02bvHMveRQIKIeT0QtKG/G7Ikvqz AtSNjuzJq0oicm43jJ3WEdvc8Sdi7TRz/tqYuHGizf3QnhUI+BEvM1slTCWPLviE T68jIhFEI02M+iHAIpMQglONdKKUmUR34wrqhjzgW/utXC2bOsbsyGsRqywy+KGo VQCXFdHQzkGSx6Y46xduf7EJsLgppsASU8uNJeCk4TjOQ0++gifazeJHm2HWiszG fU6sK5egJdmvumD3mTR9Dr5e6M1VxZ1NQ5YzmgKSSLGrUsKKDeluWmc8A5QwDIu+ Aclr5L87lumQqeFDKJU3Eh1aS6SSO2hKj2nsqYz4Tjfw6M6ot4FT2+8nfuZvNRFS ZVNWzSLzj01aWMPY5VJ8Q/gu/68= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLNPT3gNltu/n97uQ+rl NOQkmHgTPbmc0oLR2LjMXhDI6PzHQ+McGng7eNFVbNyN4VPkCKFQUJdgiGpyEWYR Eb9VuhfGGHd9jk39cgNcb9Je34KWBPT6ykCWAk5eg2RxT0J1HG6UTW+Gs70z12bI 9D0nDYKYEJskYJOZm+5u+S2n6GjZldnLWlvDOqUMpVWAIuLg3Sn0tsGmtU2g7z0G JyOP1L3Wlh0YNZho9Jimm6o4Gu9g/cVVdZrEaG+cy26pM0K1x/wrru4c4tD1zjqV IKVqwg2Hk0qZPXZGbgbcNoXntH1Yf7W3XCcGJpnCKxBzzUnJw+U03hmr5NwphkC+ QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 28990008182846608445356379720745794437 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 13:23:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 13:23:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.almosafer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25841035174081519294638406926426845161781857215333312521537272402496605459540104425954005443031329870347358840871770300668770634128634930797190597303481434454829806570699978034898287947208041387370982621185179317196870748487059837862853824000857602760508355431731500647513700714389174891991119093907977916018071289158365542054945435380274560924301032423381629247144359340731639130302083385807510821832164567511371685275553114385880649725496994032930790026458615275708856143419017883095074464026662069814284699525480422474412026555370369561836653201849933265981803940047212773485222496195004054659956451385420554485313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almosafer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almosafer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 88aa025d057270576d3ab4af28f5ad4d56920680 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 00268261d3f3041e5e088786af846897463904e28eb3040a1e163021b6667790e2f878c49519cf74862124a238689ed719c12477d9631e2e52a37cd6652f7da5d4bd7e30c674a04991eba974925844d7949796358ca6933ab6553009c048c2c0b9ef1351ce2ddcdfd76a7e011a7f09868fddf3a6b4ecbb6fc3b4876eeed59bc510a529b45c657eeee2ef435d5e149306985a8871c223127c6f3617b52a70592b7e8fcb0c0428d48d741f360401e5d09017cb7e4a74e6fc0fb8583e005c8e7f78c9a25086338ed5ccdcbea13521ed51ffed0dda8f98624fb387a89e60af61ec2185aff5bb3abb66a7d366ef1ccbde45020a21e4f442d286fc6ec892fab302d48d8eecc9ab4a22726e378c9dd611dbdcf12762ed3473feda98b871a2cdfdd09e1508f8112f335b254c258f2ef8844faf23221144234d8cfa21c022931082538d74a294994477e30aea863ce05bfbad5c2d9b3ac6ecc86b11ab2c32f8a1a855009715d1d0ce4192c7a638eb176e7fb109b0b829a6c01253cb8d25e0a4e138ce434fbe8227dacde2479b61d68accc67d4eac2b97a025d9afba60f799347d0ebe5ee8cd55c59d4d4396339a029248b1ab52c28a0de96e5a673c0394300c8bbe01c96be4bf3b96e990a9e143289537121d5a4ba4923b684a8f69eca98cf84e37f0e8cea8b78153dbef277ee66f351152655356cd22f38f4d5a58c3d8e5527c43f82effaf