resistances.opendan.net
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 6b:5a:5a:f7:e4:75:be:76:01:31:8c:f7:b7:48:3f:f3 was issued on by StartCom Ltd..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=resistances.opendan.net,C=FR
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 6b:5a:5a:f7:e4:75:be:76:01:31:8c:f7:b7:48:3f:f3Serial Number (int): 142696547323179528547499779054063075315
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ba:c5:a0:d8:bd:9e:89:ee:49:dd:a0:7f:76:ad:a6:d0:e4:23:4b:c5
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af
Fingerprint (sha1): 36:eb:81:2f:79:db:46:74:46:5f:e9:52:65:3f:8a:53:6d:84:19:bc
Fingerprint (sha256): 1b:e3:9c:03:c5:9b:5b:bf:45:3d:fc:de:ea:e3:09:a6:21:bc:1b:06:03:c0:a2:4d:20:ff:f5:f0:8e:37:9c:05
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate resistances.opendan.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for resistances.opendan.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
resistances.opendan.net
Other certificates including the domain name opendan.net
(limited to 100 certificates)
resistances.opendan.net
resistances.opendan.net
antik.opendan.net
social.opendan.net
resistances.opendan.net
social.opendan.net
resistances.opendan.net
cloud.opendan.net
opendan.net
cloud.opendan.net
resistances.opendan.net
blogs.opendan.net
cloud.opendan.net
blogs.opendan.net
antik.opendan.net
resistances.opendan.net
resistances.opendan.net
opendan.net
blogs.opendan.net
resistances.opendan.net
gallery.opendan.net
gallery.opendan.net
stats.opendan.net
antik.opendan.net
blogs.opendan.net
gallery.opendan.net
cloud.opendan.net
gallery.opendan.net
gallery.opendan.net
cloud.opendan.net
share.opendan.net
resistances.opendan.net
blogs.opendan.net
blogs.opendan.net
antik.opendan.net
stats.opendan.net
gallery.opendan.net
antik.opendan.net
antik.opendan.net
cloud.opendan.net
resistances.opendan.net
antik.opendan.net
social.opendan.net
resistances.opendan.net
social.opendan.net
resistances.opendan.net
cloud.opendan.net
opendan.net
cloud.opendan.net
resistances.opendan.net
blogs.opendan.net
cloud.opendan.net
blogs.opendan.net
antik.opendan.net
resistances.opendan.net
resistances.opendan.net
opendan.net
blogs.opendan.net
resistances.opendan.net
gallery.opendan.net
gallery.opendan.net
stats.opendan.net
antik.opendan.net
blogs.opendan.net
gallery.opendan.net
cloud.opendan.net
gallery.opendan.net
gallery.opendan.net
cloud.opendan.net
share.opendan.net
resistances.opendan.net
blogs.opendan.net
blogs.opendan.net
antik.opendan.net
stats.opendan.net
gallery.opendan.net
antik.opendan.net
antik.opendan.net
cloud.opendan.net
Certificate
The complete raw certificate details for resistances.opendan.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIQa1pa9+R1vnYBMYz3t0g/8zANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MTExOTE1NTkzMVoXDTE5MTEx OTE1NTkzMVowLzELMAkGA1UEBhMCRlIxIDAeBgNVBAMMF3Jlc2lzdGFuY2VzLm9w ZW5kYW4ubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8j/8dMU sX5bGltSeaGTz5KkjzvJtGIz2/z8NGkiLq55NO+UI8dizFxR2m4RI4zJd2Z3ma3l 6tmRUtVde6/CjGZCk0kKKeBeXNhbVwQM5wOXm6KSh5KHLk+fVtiS+6RHa2Wkfalj aDlh0CeGCsE/j713DQQBHDzWN5IpGfgS2E1QUE2iI0G37r2t7eZs5YHOIXhObQZk 9KPhzXbY8I8sbuLB4q4XXBEbp/Ch/7OnanwfnVjaozZo+IOfdw38UHGB0D6YiEPc jrQERWGsc2KzpmlNHb2B08o6FW7B/4P3EULcOc5Pz8fbfU3kf2X8tIz1R8+IblMW NzT7zLWGG/4LXQIDAQABo4IDwDCCA7wwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMCBggrBgEFBQcDATAJBgNVHRMEAjAAMB0GA1UdDgQWBBS6xaDY vZ6J7kndoH92rabQ5CNLxTAfBgNVHSMEGDAWgBTXkU4BxLC/+Mhnk0Sc5zP6rZMM rzBvBggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0 c3NsLmNvbTA5BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2Vy dHMvc2NhLnNlcnZlcjEuY3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwu c3RhcnRzc2wuY29tL3NjYS1zZXJ2ZXIxLmNybDAiBgNVHREEGzAZghdyZXNpc3Rh bmNlcy5vcGVuZGFuLm5ldDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3Ns LmNvbS8wUQYDVR0gBEowSDAIBgZngQwBAgEwPAYLKwYBBAGBtTcBAgUwLTArBggr BgEFBQcCARYfaHR0cHM6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTCCAfcGCisG AQQB1nkCBAIEggHnBIIB4wHhAHcANLtq1sPfnAPuqKSZ/3iRSGydXlysktAfe/0b zhnbSO8AAAFYfWsezAAABAMASDBGAiEA5krLYUSifvWJKYPStZMDEFDKkQV9Sgnu OBX8h6FGBsACIQDM40EZYYfZqU+nWd0Rmk5M4cezq4lV2SLsIoLFf4JNVgB2AO5L vbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABWH1rJ7IAAAQDAEcwRQIh AJAEoHCvVsMDyByL7uWri+7n5hvvJhmuWlNkVqmtV06xAiAxDMD/3iA5CJrSRrBg Ae9lURKTBlqMI5U98hYBfOh1VQB1AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0Qpn rLtPT/vEAAABWH1rI1oAAAQDAEYwRAIgN3Uat8GY6wFgndFcaGHKYJ0dFcfS/KtD ekd79y4AjdACIHTfztYYjR4Cpg5MHHjOptz+9G5/FkMjCKL7o2uyLEtyAHcApLkJ kLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFYfWsj+wAABAMASDBGAiEA tHRxVrzyyR10a3TF1AYq0eu9iSt/GBKSK9YR9UBbBocCIQCVka3Y4lZr8rwc2ogO PKQhIZFEGB8cmVUB2VtRlSGqhTANBgkqhkiG9w0BAQsFAAOCAQEAw78GUl43fb0R ksv7eZ3hMS5nwk6Ssms27znc0grgYGSP/au65lGobetMjHkrDpG3dScwNQu5NFoL tgiX4Z41vmd327BpBOthMsz1ZefVO7eN7FfiUyfv1BDh6fFnn0sh0UsCja6uq6Yr kEfSlAj+Tn9v5KT0//2J3HQyXLV4Ze6Ien4c/hXAIFzdCjAuEjUWEow4zC0aAGlZ iOZzBC1iglKP/+5gw/sn8NhummESVjXOGo9ggnoSmAhIPJkdI10quS/oDPa7s4Ll RX4H/DOslW78yUd8miKclTSfTyJ/Z38PY7Wfo+ECmZ3j5jLGvXkKa/8wIFLfCN0B KfxuqkYcBA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8j/8dMUsX5bGltSeaGT z5KkjzvJtGIz2/z8NGkiLq55NO+UI8dizFxR2m4RI4zJd2Z3ma3l6tmRUtVde6/C jGZCk0kKKeBeXNhbVwQM5wOXm6KSh5KHLk+fVtiS+6RHa2WkfaljaDlh0CeGCsE/ j713DQQBHDzWN5IpGfgS2E1QUE2iI0G37r2t7eZs5YHOIXhObQZk9KPhzXbY8I8s buLB4q4XXBEbp/Ch/7OnanwfnVjaozZo+IOfdw38UHGB0D6YiEPcjrQERWGsc2Kz pmlNHb2B08o6FW7B/4P3EULcOc5Pz8fbfU3kf2X8tIz1R8+IblMWNzT7zLWGG/4L XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 142696547323179528547499779054063075315 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-19 15:59:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 15:59:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'resistances.opendan.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22695773276396279111768578157885154492364416860562556169535360349399040371778090461807846085426270604008012542972507402986764258687428010421642519707565663181764381089083347594313819198026826424875455365565344566726636547324482057303359319927169456046268577494190595503915066307196780170203003989482724694139838064232271060804711426357756144001087310656169432122836212426629767969393656764564358023543340779687476774085863921626172984482045091700210923911812184082130182583841626815290862180126285456364467386372210195624961181220608251837643992532587766425413128094638206121371674704727608264080402408970509241682781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bac5a0d8bd9e89ee49dda07f76ada6d0e4234bc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resistances.opendan.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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