myinduction.kinross.com
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 97:8c:d5:e4:37:94:02:23 was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=myinduction.kinross.com,OU=Domain Control Validated
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 97:8c:d5:e4:37:94:02:23Serial Number (int): 10920338372628316707
Serial Number lenght: 64 bits, 8 octets
SubjectKeyId: 76:48:31:9b:ad:85:6a:64:9b:3a:d6:ae:6c:26:d6:cb:49:6d:d1:3c
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): a3:a0:21:0d:7a:e6:bd:3a:b3:55:42:a4:79:38:ce:d8:d9:85:19:b4
Fingerprint (sha256): 1c:5b:f4:c7:02:ec:a2:89:a3:0c:ed:7b:97:bc:c8:76:b9:40:6b:0d:f3:98:5f:77:68:2d:ad:26:ca:46:39:31
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-170.crl
Check the revocation status for certificate myinduction.kinross.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for myinduction.kinross.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
myinduction.kinross.com
www.myinduction.kinross.com
www.myinduction.kinross.com
Other certificates including the domain name kinross.com
(limited to 100 certificates)
www.highq.com
suppliers.kinross.com
kinrossworld.kinross.com
businessservices.kinross.com
www.highq.com
kinrossworld.kinross.com
fb.kinross.com
gh-inx.kinross.com
www.highq.com
www.highq.com
*.kinross.com
www.highq.com
cwms.kinross.com
vpn4.kinross.com
webmail.kinross.com
www.highq.com
cwms.kinross.com
webmail.kinross.com
kinrossworld.kinross.com
www.highq.com
businessservices.kinross.com
www.highq.com
www.highq.com
www.highq.com
myinduction.kinross.com
sip.kinross.com
www.kinrossworld.kinross.com
www.highq.com
www.highq.com
guest.kinross.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
sip.kinross.com
workspace.kinross.com
tor-vpn.kinross.com
webmail.kinross.com
www.highq.com
us-vpn.kinross.com
www.highq.com
www.highq.com
university.kinross.com
www.highq.com
www.highq.com
webcontrol.kinross.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
aweis.kinross.com
www.highq.com
www.highq.com
www.kinrossworld.kinross.com
ca-vpn.kinross.com
www.highq.com
www.highq.com
vpn4.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
br-vpn.kinross.com
www.highq.com
autodiscover.kinross.com
www.highq.com
www.highq.com
access.cassels.com
www.highq.com
www.highq.com
www.highq.com
OCSwc.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
kr-webmail.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
vpn1.kinross.com
www.highq.com
cwms.kinross.com
www.highq.com
www.highq.com
myuniversity.kinross.com
www.highq.com
www.highq.com
www.highq.com
webcontrol.kinross.com
webmail.kinross.com
www.highq.com
suppliers.kinross.com
kinrossworld.kinross.com
businessservices.kinross.com
www.highq.com
kinrossworld.kinross.com
fb.kinross.com
gh-inx.kinross.com
www.highq.com
www.highq.com
*.kinross.com
www.highq.com
cwms.kinross.com
vpn4.kinross.com
webmail.kinross.com
www.highq.com
cwms.kinross.com
webmail.kinross.com
kinrossworld.kinross.com
www.highq.com
businessservices.kinross.com
www.highq.com
www.highq.com
www.highq.com
myinduction.kinross.com
sip.kinross.com
www.kinrossworld.kinross.com
www.highq.com
www.highq.com
guest.kinross.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
sip.kinross.com
workspace.kinross.com
tor-vpn.kinross.com
webmail.kinross.com
www.highq.com
us-vpn.kinross.com
www.highq.com
www.highq.com
university.kinross.com
www.highq.com
www.highq.com
webcontrol.kinross.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
aweis.kinross.com
www.highq.com
www.highq.com
www.kinrossworld.kinross.com
ca-vpn.kinross.com
www.highq.com
www.highq.com
vpn4.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
br-vpn.kinross.com
www.highq.com
autodiscover.kinross.com
www.highq.com
www.highq.com
access.cassels.com
www.highq.com
www.highq.com
www.highq.com
OCSwc.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
kr-webmail.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
vpn1.kinross.com
www.highq.com
cwms.kinross.com
www.highq.com
www.highq.com
myuniversity.kinross.com
www.highq.com
www.highq.com
www.highq.com
webcontrol.kinross.com
webmail.kinross.com
www.highq.com
Certificate
The complete raw certificate details for myinduction.kinross.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIJAJeM1eQ3lAIjMA0GCSqGSIb3DQEBCwUAMIHGMQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEl MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEzMDEGA1UECxMq aHR0cDovL2NlcnRzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMTQwMgYD VQQDEytTdGFyZmllbGQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcy MB4XDTIwMDEyMDIyNTIyMVoXDTIyMDEyMDIyNTIyMVowRTEhMB8GA1UECxMYRG9t YWluIENvbnRyb2wgVmFsaWRhdGVkMSAwHgYDVQQDExdteWluZHVjdGlvbi5raW5y b3NzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMExwyp8RHmd AA1SU84u7etLl1i4arFJjF+f3Zx8UL/+W9AglqjZiBLbOeNwe+iDhzNdpVnL/3Do GWuco1WNtQAnHxw98lQ/abL3+1fZ8a+2WjAU4VsgBzgCPZrbiaPYtSuDlUM22Uju TP/TW8HAbcPcvxM3hgdxWKZjYdl/neoDAGQvwknBn1ekzkEetLYDBf0cyRLil2ww K9suSElyU7Av/w0Nu3DYgXWZY/fSbs2uqtqn8E4PK8Hnamha9VzdjLU5uDkKU9nF 0t+KGfILqUUEoDAsXdC57QLWNC7xkrUz8uWBZPG85bo5cn+c/GmSA08H7Oon5l95 yuSUPEvFDlECAwEAAaOCAgAwggH8MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA9BgNVHR8ENjA0MDKg MKAuhixodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcyczEtMTcwLmNy bDBjBgNVHSAEXDBaME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYBBQUHAgEWMWh0dHA6 Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8wCAYG Z4EMAQIBMIGCBggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3Nw LnN0YXJmaWVsZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0cDovL2NlcnRpZmlj YXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmaWcyLmNydDAfBgNV HSMEGDAWgBQlRYFoUCY4PTstLL7Natm2PbNmYzA/BgNVHREEODA2ghdteWluZHVj dGlvbi5raW5yb3NzLmNvbYIbd3d3Lm15aW5kdWN0aW9uLmtpbnJvc3MuY29tMB0G A1UdDgQWBBR2SDGbrYVqZJs61q5sJtbLSW3RPDATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAh1ie7ZIUvbpZBtBiTkLKZpDKNA8pPlB8bSna ocjS+8og++/OXa9/5oceiltUdNsiFyZDiX3ubhoTAGxXcRrtjQSlnBNgMElBZ7Ga OT7rWM3NQNhZuVnxzHbZjve22npKAnJYodpu5V3sJH1ZDfILGzEUCzh4Mrk+JVOc t2h4ICDriphkyM3fiuBpa4DsyKd7IwMg6BOaNsQkdKfoPTNLYq6iA5AIUi1bw34v 5ibWv+TbOwmFQKZkJDYRlqLg0kgYu208ya+WT1kYAjXS+VBeNLWd474Z9bAQGpe6 Emp4B3q1yPdbr4e0KTixVxnCQFkGALw+ti6JFN42E7GNmmDOtg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTHDKnxEeZ0ADVJTzi7t 60uXWLhqsUmMX5/dnHxQv/5b0CCWqNmIEts543B76IOHM12lWcv/cOgZa5yjVY21 ACcfHD3yVD9psvf7V9nxr7ZaMBThWyAHOAI9mtuJo9i1K4OVQzbZSO5M/9NbwcBt w9y/EzeGB3FYpmNh2X+d6gMAZC/CScGfV6TOQR60tgMF/RzJEuKXbDAr2y5ISXJT sC//DQ27cNiBdZlj99Juza6q2qfwTg8rwedqaFr1XN2MtTm4OQpT2cXS34oZ8gup RQSgMCxd0LntAtY0LvGStTPy5YFk8bzlujlyf5z8aZIDTwfs6ifmX3nK5JQ8S8UO UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10920338372628316707 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 22:52:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-20 22:52:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myinduction.kinross.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24388531596201144800791499527312400240825561630991408359674983959461900195550468269644166710181407776782202559752557681390917013716678632983984771547752758416313441033642269783086522564246911350018420620189305951070204041537772002453861291293912660341513911141179151670986304701346771701080943637687407644699327074451100114380121866043587557774991549449518086252486318285122678999147641979744837734120982001318675191023325375643742257929847609355714088428856255717701902626085646857666283201096132020870701994819599811185432776839614412064992800665468555397827931832175612544610994926896748490679283056866572741447249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-170.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinduction.kinross.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myinduction.kinross.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7648319bad856a649b3ad6ae6c26d6cb496dd13c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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