kimclark.com
Issued by COMODO RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number b7:05:d5:93:89:a9:67:2c:2d:7e:f1:ae:58:23:40:18 was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kimclark.com,OU=Domain Control Validated+OU=Hosted by Kimberly-Clark Corporation+OU=Free SSL
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): b7:05:d5:93:89:a9:67:2c:2d:7e:f1:ae:58:23:40:18Serial Number (int): 243279016555321988309919216400809017368
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: e3:35:f5:19:54:e9:da:42:57:4b:c8:4e:64:5f:9d:56:84:74:e3:6a
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7
Fingerprint (sha1): 33:cb:b4:14:9c:99:2c:94:25:88:61:db:25:12:1f:cc:ca:d4:68:ca
Fingerprint (sha256): 1a:fa:15:c2:32:25:75:31:84:df:33:6a:f9:ce:ae:af:ed:8d:37:86:0d:57:7c:4e:83:fc:64:48:ae:f3:13:91
Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
Check the revocation status for certificate kimclark.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kimclark.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kimclark.com
www.kimclark.com
www.kimclark.com
Other certificates including the domain name kimclark.com
(limited to 100 certificates)
server3.qa1.srmportal.kimclark.com
server1.tccwest.dev4.siteinformation.kimclark.com
*.pbiplatform.app.kimclark.com
server1.tcceast.dev1.fpdc.kimclark.com
iacforms.kimclark.com
server4.tccwest.qa2.fpdc.kimclark.com
www.scmportal.kimclark.com
server1.tccwest.qa2.workgrid.kimclark.com
server1.tcceast.dev2.workgrid.kimclark.com
server6.tccwest.www2.privacy.kimclark.com
tcceast.dev2.privacy.kimclark.com
server1.tccwest.qa1.scmportal.kimclark.com
tcceast.dev2.fpdc.kimclark.com
server1.tccwest.www1.workgrid.kimclark.com
tccwest.www2.gigya-api.kimclark.com
server6.tcceast.www1.workgrid.kimclark.com
server2.tcceast.dev1.siteinformation.kimclark.com
qa4.siteinformation.kimclark.com
server1.tccwest.dev1.ngsportal.kimclark.com
server3.tccwest.qa1.privacy.kimclark.com
server4.qa1.siteinformation.kimclark.com
iosqa.kimclark.com
server4.tccwest.qa4.siteinformation.kimclark.com
www.cdn3.kimberly-clark.com
ssl400476.cloudflaressl.com
server1.tccwest.dev2.scmportal.kimclark.com
server2.tcceast.qa2.privacy.kimclark.com
tcceast.qa2.gigya-api.kimclark.com
server2.tccwest.dev1.fpdc.kimclark.com
tcceast.qa4.siteinformation.kimclark.com
server1.tccwest.dev2.hmby.kimclark.com
fridge.kimclark.com
server1.tcceast.www2.workgrid.kimclark.com
server1.tccwest.dev2.fpdc.kimclark.com
qa2.pmcwebs.kimclark.com
server1.tcceast.www2.gigya-api.kimclark.com
ssl967418.cloudflaressl.com
server3.tccwest.www1.gigya-api.kimclark.com
server1.tccwest.dev2.hmby.kimclark.com
server3.tccwest.www2.privacy.kimclark.com
server4.tcceast.www1.privacy.kimclark.com
server2.tccwest.dev3.siteinformation.kimclark.com
tcceast.qa1.workgrid.kimclark.com
server1.tcceast.dev1.scmportal.kimclark.com
server2.tccwest.qa2.workgrid.kimclark.com
server1.tcceast.dev4.siteinformation.kimclark.com
server3.tccwest.qa1.gigya-api.kimclark.com
qa.privacy.kimclark.com
qa.branding.kimclark.com
server1.tccwest.qa1.privacy.kimclark.com
ssl965347.cloudflaressl.com
server2.tcceast.qa1.workgrid.kimclark.com
ssl922264.cloudflaressl.com
server3.tccwest.qa2.scmportal.kimclark.com
server4.tcceast.www2.gigya-api.kimclark.com
dev.srmportal.kimclark.com
server1.tccwest.dev1.hmby.kimclark.com
server5.tccwest.www1.workgrid.kimclark.com
server2.tccwest.qa2.hmby.kimclark.com
server2.tcceast.qa1.privacy.kimclark.com
ssl967496.cloudflaressl.com
tccwest.qa1.scmportal.kimclark.com
server2.tcceast.www2.gigya-api.kimclark.com
www.apm.kimclark.com
mail.kcc.com
server1.tcceast.qa1.workgrid.kimclark.com
server1.dev1.ngsportal.kimclark.com
server4.tccwest.www1.privacy.kimclark.com
ssl973556.cloudflaressl.com
server2.tcceast.qa1.scmportal.kimclark.com
www.cdn3.kimberly-clark.com
server1.qa2.siteinformation.kimclark.com
server3.tccwest.www1.privacy.kimclark.com
server2.tcceast.www1.workgrid.kimclark.com
tccwest.qa2.scmportal.kimclark.com
ssl965581.cloudflaressl.com
server5.tccwest.www1.workgrid.kimclark.com
www.dtsaudit.kimclark.com
server2.tcceast.qa2.gigya-api.kimclark.com
server1.tccwest.qa1.gigya-api.kimclark.com
tcceast.qa2.scmportal.kimclark.com
ssl973724.cloudflaressl.com
www.global.itgsmi.com
server2.tcceast.dev2.hmby.kimclark.com
server2.tccwest.dev1.workgrid.kimclark.com
server1.tccwest.www2.privacy.kimclark.com
server1.tcceast.qa1.catalogoadomicilio.kimclark.com
server3.tccwest.qa1.fpdc.kimclark.com
server1.tcceast.qa1.scmportal.kimclark.com
server1.tccwest.qa2.srmportal.kimclark.com
dev2.wemutilitiesservice.kimclark.com
server1.tccwest.qa1.scmportal.kimclark.com
server6.tcceast.www1.gigya-api.kimclark.com
ssl965575.cloudflaressl.com
server1.tccwest.dev2.scmportal.kimclark.com
server1.tcceast.qa1.workgrid.kimclark.com
server4.tcceast.www2.workgrid.kimclark.com
dev.hmby.kimclark.com
qa1.wemutilitiesservice.kimclark.com
tcceast.dev1.scmportal.kimclark.com
server1.tccwest.dev4.siteinformation.kimclark.com
*.pbiplatform.app.kimclark.com
server1.tcceast.dev1.fpdc.kimclark.com
iacforms.kimclark.com
server4.tccwest.qa2.fpdc.kimclark.com
www.scmportal.kimclark.com
server1.tccwest.qa2.workgrid.kimclark.com
server1.tcceast.dev2.workgrid.kimclark.com
server6.tccwest.www2.privacy.kimclark.com
tcceast.dev2.privacy.kimclark.com
server1.tccwest.qa1.scmportal.kimclark.com
tcceast.dev2.fpdc.kimclark.com
server1.tccwest.www1.workgrid.kimclark.com
tccwest.www2.gigya-api.kimclark.com
server6.tcceast.www1.workgrid.kimclark.com
server2.tcceast.dev1.siteinformation.kimclark.com
qa4.siteinformation.kimclark.com
server1.tccwest.dev1.ngsportal.kimclark.com
server3.tccwest.qa1.privacy.kimclark.com
server4.qa1.siteinformation.kimclark.com
iosqa.kimclark.com
server4.tccwest.qa4.siteinformation.kimclark.com
www.cdn3.kimberly-clark.com
ssl400476.cloudflaressl.com
server1.tccwest.dev2.scmportal.kimclark.com
server2.tcceast.qa2.privacy.kimclark.com
tcceast.qa2.gigya-api.kimclark.com
server2.tccwest.dev1.fpdc.kimclark.com
tcceast.qa4.siteinformation.kimclark.com
server1.tccwest.dev2.hmby.kimclark.com
fridge.kimclark.com
server1.tcceast.www2.workgrid.kimclark.com
server1.tccwest.dev2.fpdc.kimclark.com
qa2.pmcwebs.kimclark.com
server1.tcceast.www2.gigya-api.kimclark.com
ssl967418.cloudflaressl.com
server3.tccwest.www1.gigya-api.kimclark.com
server1.tccwest.dev2.hmby.kimclark.com
server3.tccwest.www2.privacy.kimclark.com
server4.tcceast.www1.privacy.kimclark.com
server2.tccwest.dev3.siteinformation.kimclark.com
tcceast.qa1.workgrid.kimclark.com
server1.tcceast.dev1.scmportal.kimclark.com
server2.tccwest.qa2.workgrid.kimclark.com
server1.tcceast.dev4.siteinformation.kimclark.com
server3.tccwest.qa1.gigya-api.kimclark.com
qa.privacy.kimclark.com
qa.branding.kimclark.com
server1.tccwest.qa1.privacy.kimclark.com
ssl965347.cloudflaressl.com
server2.tcceast.qa1.workgrid.kimclark.com
ssl922264.cloudflaressl.com
server3.tccwest.qa2.scmportal.kimclark.com
server4.tcceast.www2.gigya-api.kimclark.com
dev.srmportal.kimclark.com
server1.tccwest.dev1.hmby.kimclark.com
server5.tccwest.www1.workgrid.kimclark.com
server2.tccwest.qa2.hmby.kimclark.com
server2.tcceast.qa1.privacy.kimclark.com
ssl967496.cloudflaressl.com
tccwest.qa1.scmportal.kimclark.com
server2.tcceast.www2.gigya-api.kimclark.com
www.apm.kimclark.com
mail.kcc.com
server1.tcceast.qa1.workgrid.kimclark.com
server1.dev1.ngsportal.kimclark.com
server4.tccwest.www1.privacy.kimclark.com
ssl973556.cloudflaressl.com
server2.tcceast.qa1.scmportal.kimclark.com
www.cdn3.kimberly-clark.com
server1.qa2.siteinformation.kimclark.com
server3.tccwest.www1.privacy.kimclark.com
server2.tcceast.www1.workgrid.kimclark.com
tccwest.qa2.scmportal.kimclark.com
ssl965581.cloudflaressl.com
server5.tccwest.www1.workgrid.kimclark.com
www.dtsaudit.kimclark.com
server2.tcceast.qa2.gigya-api.kimclark.com
server1.tccwest.qa1.gigya-api.kimclark.com
tcceast.qa2.scmportal.kimclark.com
ssl973724.cloudflaressl.com
www.global.itgsmi.com
server2.tcceast.dev2.hmby.kimclark.com
server2.tccwest.dev1.workgrid.kimclark.com
server1.tccwest.www2.privacy.kimclark.com
server1.tcceast.qa1.catalogoadomicilio.kimclark.com
server3.tccwest.qa1.fpdc.kimclark.com
server1.tcceast.qa1.scmportal.kimclark.com
server1.tccwest.qa2.srmportal.kimclark.com
dev2.wemutilitiesservice.kimclark.com
server1.tccwest.qa1.scmportal.kimclark.com
server6.tcceast.www1.gigya-api.kimclark.com
ssl965575.cloudflaressl.com
server1.tccwest.dev2.scmportal.kimclark.com
server1.tcceast.qa1.workgrid.kimclark.com
server4.tcceast.www2.workgrid.kimclark.com
dev.hmby.kimclark.com
qa1.wemutilitiesservice.kimclark.com
tcceast.dev1.scmportal.kimclark.com
Certificate
The complete raw certificate details for kimclark.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIRALcF1ZOJqWcsLX7xrlgjQBgwDQYJKoZIhvcNAQELBQAw gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg Q0EwHhcNMTgwNzE2MDAwMDAwWhcNMTgxMDE0MjM1OTU5WjB8MSEwHwYDVQQLExhE b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxLTArBgNVBAsTJEhvc3RlZCBieSBLaW1i ZXJseS1DbGFyayBDb3Jwb3JhdGlvbjERMA8GA1UECxMIRnJlZSBTU0wxFTATBgNV BAMTDGtpbWNsYXJrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJEMjpEUF8iL1rFhjTiU/Ij8f2QQS8pYyvxVx2/38p2ecar3jmECDd45AUjjvJSD twQwmC1CnB5vfr3fsdfMGP2PlsgGzm56+3gPyU5xftmfdOgXyKQTm03RbyzrdHRf GlWDflFQHoLnfG8tKowaaZhwI1K4uDo08YENvj+4WCUqRpBLNZlxX6cr9FU7oP7k hsVqFpj4220XLdFzzoMOGpIiXEmtTFSdZmZc9hoBXFdADxFQOv6mdVytqiTOO8Ec DvXeCWPRAjhZ6HTdyY6QmHEWg1m1cTAJmx9niZR7A9rvH6A+zDePrPDaO1rWth3M pUVgNkFbmarEKhFyCYkEjusCAwEAAaOCAfAwggHsMB8GA1UdIwQYMBaAFJCvajqU WgvYkOoSVnPfQ7Q6KNrnMB0GA1UdDgQWBBTjNfUZVOnaQldLyE5kX51WhHTjajAO BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwTwYDVR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUF BwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwVAYD VR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNB RG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBhQYIKwYBBQUHAQEE eTB3ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9S U0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wKQYDVR0RBCIwIIIMa2ltY2xhcmsu Y29tghB3d3cua2ltY2xhcmsuY29tMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBE+OivJvrjTTOXE2uGNqMwS8aDmsZXZHLyEEF9r3X/OtcA Ov2OdyegHYK4VNountrPq6p7NTWgTT2zSmcW9dyHRgvYn4QwnXyBVVYzizyz0KlN czWVM4gkZf/ZehvV1wdyCeNlwO6JZSyBMOCHMrAq8WJruuU6ygsiBCxA+v4erCI3 wcY0i/A+4nms0G/Rtk2dRylTobDnAqziaRliVdhiVx1gc1tVVY8JYoJJWvF0o60a L25bawqjqYpqt0FR6AKUPMSks+sBuh0FEc2y6bYk3f3YjX0lz9gub+V5BCIollmV Z53k9ZkWYqevtpDhfDMVKb5ggb9Mhou1MXBlMJy+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQyOkRQXyIvWsWGNOJT8 iPx/ZBBLyljK/FXHb/fynZ5xqveOYQIN3jkBSOO8lIO3BDCYLUKcHm9+vd+x18wY /Y+WyAbObnr7eA/JTnF+2Z906BfIpBObTdFvLOt0dF8aVYN+UVAegud8by0qjBpp mHAjUri4OjTxgQ2+P7hYJSpGkEs1mXFfpyv0VTug/uSGxWoWmPjbbRct0XPOgw4a kiJcSa1MVJ1mZlz2GgFcV0APEVA6/qZ1XK2qJM47wRwO9d4JY9ECOFnodN3JjpCY cRaDWbVxMAmbH2eJlHsD2u8foD7MN4+s8No7Wta2HcylRWA2QVuZqsQqEXIJiQSO 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 243279016555321988309919216400809017368 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Kimberly-Clark Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Free SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kimclark.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18310746258851535863903343808290862872294862567451652652134399488255622101863341556585284319166195608358273980483535132002326403264216323651690114720303725576362839220834861217809772623490447518512418140930449150399425199576174048463779972126078876696210103243697793847279190140857593084637040321985811683433461754000122267787769793232040152453313507701711526558217763869656175324089989672693694172904820898164040085841447392111831536273340868508498099372664925123584070945492550423025510472751529969892587930831009035910018308839108114146885805492130497937668331564412915224417519663858732124922710374368254378675947 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e335f51954e9da42574bc84e645f9d568474e36a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimclark.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimclark.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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