zp1.icka.eu
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 23:90:6d:03:86:be:bd:2a:fd:2c:07:94:d2:1f:07:09 was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=zp1.icka.eu
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 23:90:6d:03:86:be:bd:2a:fd:2c:07:94:d2:1f:07:09Serial Number (int): 47272881662133936847069358349636011785
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 83:3d:42:b4:59:5d:d5:6f:6e:26:ce:87:f8:fd:f9:59:80:34:5e:9f
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af
Fingerprint (sha1): 60:d3:08:d6:da:07:10:8e:71:3f:9a:eb:86:25:19:31:45:70:5e:0b
Fingerprint (sha256): 1a:2b:09:35:0e:35:1c:35:3c:95:2a:fc:53:d8:d7:a5:93:e7:c1:41:04:2a:cf:70:f1:58:7a:3a:ca:3d:b8:b8
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate zp1.icka.eu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zp1.icka.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zp1.icka.eu
icka.eu
icka.eu
Other certificates including the domain name icka.eu
(limited to 100 certificates)
blogs.icka.eu
puys.icka.eu
forum.icka.eu
factorio.icka.eu
zimbra.icka.eu
icka.eu
blog.icka.eu
icka.eu
icka.eu
zp1.icka.eu
icka.eu
icka.eu
icka.eu
icka.eu
factorio.icka.eu
icka.eu
test.icka.eu
scp.icka.eu
icka.eu
kf2.icka.eu
forum.icka.eu
sentora.icka.eu
test.icka.eu
zimbra.icka.eu
test.icka.eu
icka.eu
blog.icka.eu
forum.icka.eu
forum.icka.eu
blogs.icka.eu
kf2.icka.eu
blog.icka.eu
chivalry.icka.eu
icka.eu
icka.eu
forum.icka.eu
kf2.icka.eu
zimbra.icka.eu
factorio.icka.eu
forum.icka.eu
forum.icka.eu
blogs.icka.eu
zimbra.icka.eu
blogs.icka.eu
www.icka.eu
icka.eu
puys.icka.eu
factorio.icka.eu
test.icka.eu
icka.eu
test.icka.eu
chivalry.icka.eu
zimbra.icka.eu
forum.icka.eu
blog.icka.eu
forum.icka.eu
blog.icka.eu
scp.icka.eu
scp.icka.eu
forum.icka.eu
icka.eu
forum.icka.eu
puys.icka.eu
blog.icka.eu
icka.eu
kf2.icka.eu
factorio.icka.eu
test.icka.eu
puys.icka.eu
scp.icka.eu
chivalry.icka.eu
icka.eu
icka.eu
forum.icka.eu
scp.icka.eu
icka.eu
chivalry.icka.eu
test.icka.eu
forum.icka.eu
blog.icka.eu
blogs.icka.eu
factorio.icka.eu
icka.eu
kf2.icka.eu
chivalry.icka.eu
icka.eu
forum.icka.eu
chivalry.icka.eu
kf2.icka.eu
forum.icka.eu
blog.icka.eu
scp.icka.eu
chivalry.icka.eu
kf2.icka.eu
icka.eu
puys.icka.eu
forum.icka.eu
factorio.icka.eu
zimbra.icka.eu
icka.eu
blog.icka.eu
icka.eu
icka.eu
zp1.icka.eu
icka.eu
icka.eu
icka.eu
icka.eu
factorio.icka.eu
icka.eu
test.icka.eu
scp.icka.eu
icka.eu
kf2.icka.eu
forum.icka.eu
sentora.icka.eu
test.icka.eu
zimbra.icka.eu
test.icka.eu
icka.eu
blog.icka.eu
forum.icka.eu
forum.icka.eu
blogs.icka.eu
kf2.icka.eu
blog.icka.eu
chivalry.icka.eu
icka.eu
icka.eu
forum.icka.eu
kf2.icka.eu
zimbra.icka.eu
factorio.icka.eu
forum.icka.eu
forum.icka.eu
blogs.icka.eu
zimbra.icka.eu
blogs.icka.eu
www.icka.eu
icka.eu
puys.icka.eu
factorio.icka.eu
test.icka.eu
icka.eu
test.icka.eu
chivalry.icka.eu
zimbra.icka.eu
forum.icka.eu
blog.icka.eu
forum.icka.eu
blog.icka.eu
scp.icka.eu
scp.icka.eu
forum.icka.eu
icka.eu
forum.icka.eu
puys.icka.eu
blog.icka.eu
icka.eu
kf2.icka.eu
factorio.icka.eu
test.icka.eu
puys.icka.eu
scp.icka.eu
chivalry.icka.eu
icka.eu
icka.eu
forum.icka.eu
scp.icka.eu
icka.eu
chivalry.icka.eu
test.icka.eu
forum.icka.eu
blog.icka.eu
blogs.icka.eu
factorio.icka.eu
icka.eu
kf2.icka.eu
chivalry.icka.eu
icka.eu
forum.icka.eu
chivalry.icka.eu
kf2.icka.eu
forum.icka.eu
blog.icka.eu
scp.icka.eu
chivalry.icka.eu
kf2.icka.eu
icka.eu
Certificate
The complete raw certificate details for zp1.icka.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIQI5BtA4a+vSr9LAeU0h8HCTANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MDEyMjEzMTk1OVoXDTE3MDEy MjEzMTk1OVowFjEUMBIGA1UEAwwLenAxLmlja2EuZXUwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDuzkUU5gmdoiuCCQuqtOTHiLKp8f0JDxybHNYiuefu rzzwtZrp9CCclQ7evxgoK8r/XN6sHBCd0GsgzhnQI0FF8Jv/JKuRTSNTW7fk3xKq W9KV20SxPFXZlk/t+Cwxn9wj/ekZ5O3Ze/3E0s1b2Al/YiNYKbQS5jzUsa4E9yVK Ojj+9ENH9cw7hTHkWXbXexSzAy1Cl6eNDVtFRDO0qukxDi5FIAvwv3WRDUK2huPV B+Jhf/QQDUdDn1ltjp5ViK6QGfSxoDfM6ZuDxz4QvJgFwLfNj1nvP3yy3WUJzh/E IhVc/HobKajwV1Kld++2QB4QDzDkciWCY9JWwFNnt4hzAgMBAAGjggG+MIIBujAL BgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMAkGA1Ud EwQCMAAwHQYDVR0OBBYEFIM9QrRZXdVvbibOh/j9+VmANF6fMB8GA1UdIwQYMBaA FNeRTgHEsL/4yGeTRJznM/qtkwyvMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcw AYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2Euc2VydmVyMS5jcnQwOAYDVR0fBDEw LzAtoCugKYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLXNlcnZlcjEuY3Js MB8GA1UdEQQYMBaCC3pwMS5pY2thLmV1ggdpY2thLmV1MCMGA1UdEgQcMBqGGGh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBQBgNVHSAESTBHMAgGBmeBDAECATA7Bgsr BgEEAYG1NwECBDAsMCoGCCsGAQUFBwIBFh5odHRwOi8vd3d3LnN0YXJ0c3NsLmNv bS9wb2xpY3kwDQYJKoZIhvcNAQELBQADggEBAMPkbbt/mty8ZhGcfVHbY3CzB7Ff 9Rlk/pb2K7wMRO+K34eOuCxAF/zA4xzidbisYtCeD90S28cMmSON4kqu3ezCeyQa yc677xc778SgewNQ36cP5qj79YnK0TkQxt6SV+/qteASqI2IUPfyr/qsUpeo8M9W SrbQy+s/2KKH1SCkMidiSOKyxV09QqY5wJ3zqiNFhsa62vDtn2cp2lX8HOl8UQ89 BVdZA+Pf3FTesdxlm0hM6bWhqIc7QTjBgzpxbs+H5tKty6uY7t0XY5frn30M8++K JIyqdZcxXWi/b50w7JpitSwOV004SSi91/IifESNMkT+BIqhmDQbNSOwtlc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7s5FFOYJnaIrggkLqrTk x4iyqfH9CQ8cmxzWIrnn7q888LWa6fQgnJUO3r8YKCvK/1zerBwQndBrIM4Z0CNB RfCb/ySrkU0jU1u35N8SqlvSldtEsTxV2ZZP7fgsMZ/cI/3pGeTt2Xv9xNLNW9gJ f2IjWCm0EuY81LGuBPclSjo4/vRDR/XMO4Ux5Fl213sUswMtQpenjQ1bRUQztKrp MQ4uRSAL8L91kQ1Ctobj1QfiYX/0EA1HQ59ZbY6eVYiukBn0saA3zOmbg8c+ELyY BcC3zY9Z7z98st1lCc4fxCIVXPx6Gymo8FdSpXfvtkAeEA8w5HIlgmPSVsBTZ7eI cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 47272881662133936847069358349636011785 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-22 13:19:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-22 13:19:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'zp1.icka.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30146432036011440276484331035052273420855657703094042707615788136352466006047529872696715542891226083920680066599082615011974003136053530009859949065914216572600326030265090288760544782194305790560318547689474071517417857072053300856809870651819939218831866165633665394585297206947141757725692619510132273993350062552403171250248067537402326782150930021706448413489122719138231611178943472430635818901933517260905187764867478911964516932599798806866393492942637467836455397351776965932615937249474820641716845190863030528136206665907551439966667726373154216599790028341795646164644932126029673769086092830707562285171 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 833d42b4595dd56f6e26ce87f8fdf95980345e9f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zp1.icka.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icka.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00c3e46dbb7f9adcbc66119c7d51db6370b307b15ff51964fe96f62bbc0c44ef8adf878eb82c4017fcc0e31ce275b8ac62d09e0fdd12dbc70c99238de24aaeddecc27b241ac9cebbef173befc4a07b0350dfa70fe6a8fbf589cad13910c6de9257efeab5e012a88d8850f7f2affaac5297a8f0cf564ab6d0cbeb3fd8a287d520a432276248e2b2c55d3d42a639c09df3aa234586c6badaf0ed9f6729da55fc1ce97c510f3d05575903e3dfdc54deb1dc659b484ce9b5a1a8873b4138c1833a716ecf87e6d2adcbab98eedd176397eb9f7d0cf3ef8a248caa7597315d68bf6f9d30ec9a62b52c0e574d384928bdd7f2227c448d3244fe048aa198341b3523b0b657