employindy.org

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 50:de:ab:a9:08:9a:41:be was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=employindy.org

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 50:de:ab:a9:08:9a:41:be
Serial Number (int): 5827283710346150334
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: be:a0:c1:65:26:00:1a:47:a0:d4:fc:7e:35:c4:94:10:4e:57:86:de
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 17:65:5d:b8:24:15:ec:4a:7a:6f:74:d6:e8:b3:48:cb:03:71:e3:d3
Fingerprint (sha256): 1e:9d:f4:b4:b5:54:75:b7:ae:d0:43:1f:ef:72:b5:9f:bd:fa:e9:61:fc:c5:b3:2b:1e:82:ee:1d:82:6b:9e:43

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-682.crl

Check the revocation status for certificate employindy.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for employindy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.employindy.org
employindy.org

Other certificates including the domain name employindy.org

(limited to 100 certificates)
wadetrim.trubytraining.com
www.summitmortgagetraining.com
india.polo-development.com
bhsa.mysportsanalysis.com
www.summitmortgagetraining.com
wadetrim.trubytraining.com
farmviability.oahurcd.org
go.rescuevocations.org
academy.boulderinsight.com
www.frailtycertification.com
internal.hedgucation.assurehedge.com
www.educate.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
educate.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learning.servicon.com
www.learn-experiencemanitouregion.ca
employindy.org
university.foremostmedia.com
www.summitmortgagetraining.com
serpentine.polo-development.com
polopark.polo-development.com
learning.servicon.com
www.summitmortgagetraining.com
plataforma.pedago.cl
www.summitmortgagetraining.com
learn-rto8.com
uni.bradfordconsolidation.com
learning.servicon.com
www.summitmortgagetraining.com
learning.servicon.com
farmviability.oahurcd.org
farmviability.oahurcd.org
www.summitmortgagetraining.com
learning.servicon.com
www.summitmortgagetraining.com
trainingacademy.anywhere365.io
employindy.org
farmviability.oahurcd.org
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learning.servicon.com
www.summitmortgagetraining.com
polobern.polo-development.com
www.tridotacademy.com
australia.polo-development.com
bridgeyou.barlowcomputers.com
book.dragonnapper.com
competence.rosen-group.com
uni.airportlogistics.org
education.urbangreencouncil.org
helix21.ahacentre.org
book.dragonnapper.com
www.summitmortgagetraining.com
elearning.toyota.com.ph
www.summitmortgagetraining.com
employindy.org
www.summitmortgagetraining.com
academy.boulderinsight.com
educate.ekgguy.com
learning.travelalberta.com
farmviability.oahurcd.org
learning.employindy.org
uspa.polo-development.com
alp.arcsystechnologies.com
www.summitmortgagetraining.com
internal.hedgucation.assurehedge.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
ucdavis.boulderinsight.com
www.summitmortgagetraining.com
www.educate.ekgguy.com
www.learn-experiencemanitouregion.ca
learning.potawatomi.org
lms.singleuseendoscopy.com
smarterbahamas.com
www.bloombehive.com
www.pts.org
litifam-training.litify.com
educate.ekgguy.com
www.employindy.org
www.educate.ekgguy.com
www.summitmortgagetraining.com
learning.servicon.com
academy.evgo.com
www.summitmortgagetraining.com
www.tcacommunity.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
university.safefleet.net
www.summitmortgagetraining.com
trainingacademy.anywhere365.io
university.ambassadorsforbusiness.com
educate.ekgguy.com
elearning.toyota.com.ph
farmviability.oahurcd.org
university.tektonresearch.com
educate.ekgguy.com

Certificate

The complete raw certificate details for employindy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvzCCBaegAwIBAgIIUN6rqQiaQb4wDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw
IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo
dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV
BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw
HhcNMjQwMzAxMTUyODU3WhcNMjUwMzAxMTUyODU3WjAZMRcwFQYDVQQDEw5lbXBs
b3lpbmR5Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOaScvxl
b7bZYy2A8MhFj3D3ridDXj1E4G8SJvPPu6q16w03N4X5Fopqje/+8cSY83x8NujV
xFVzwmS/b7i1Wz3qxmIi6/jycWoVJZt3jvVc5VUmeVdfiaR7P7XmW3Hje7XSYzy3
CbWijEdvzhQvvOHBqKt08zlS5ftSSRRxCi/oSJfs36czGHl7baBb7xFqZSVqxEhF
49exGf0Nr9wA7dh0HN42dxvKRi2jrxZtplnFrW1GIzOZfeVFGP1Nh21TgOnWeiBf
LgeLTKWKI/YgJJqxanY8Y5thnrB9jOGzRGZf+wIZrV7H/9QCvk18+kUfhm5i3SSw
t5RWLHSVKRsx588CAwEAAaOCA1swggNXMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA9BgNVHR8ENjA0
MDKgMKAuhixodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcyczEtNjgy
LmNybDBjBgNVHSAEXDBaME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYBBQUHAgEWMWh0
dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8w
CAYGZ4EMAQIBMIGCBggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9v
Y3NwLnN0YXJmaWVsZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0cDovL2NlcnRp
ZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmaWcyLmNydDAf
BgNVHSMEGDAWgBQlRYFoUCY4PTstLL7Natm2PbNmYzAtBgNVHREEJjAkghJ3d3cu
ZW1wbG95aW5keS5vcmeCDmVtcGxveWluZHkub3JnMB0GA1UdDgQWBBS+oMFlJgAa
R6DU/H41xJQQTleG3jCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYATnWjJ1ya
EMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGN+qIDjgAABAMARzBFAiAYWTGV
L2lEVCPg+AmukropkkVngpcCoawR+OksRrVEbwIhAOMyY9ZyRZ8PeDixwOzLuC4/
DiivX+Qw8/Ny5pv0H+K6AHcAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowu
ebgAAAGN+qIEQgAABAMASDBGAiEA0mFaWrg1uaV9Yd4zIu8zoC11f6wUawAAlnHB
SF/7oJwCIQCbDHuUguqSF5fCCvKPBiXEYg/YIvFjWY4GyB8SyIQ+VQB1AMz7D2qF
cQll/pWbU87psnwi6YVcDZeNtql+VMD+TA2wAAABjfqiBK4AAAQDAEYwRAIgagbT
JOiUG7IqFNwRjmKJAirsoxG4U+wSfJKjv9iV0iICIG/9y1jfNAqDYX73OzRI59Fn
nvWvKPcaDRQCrAdqtKycMA0GCSqGSIb3DQEBCwUAA4IBAQB1SNAjmXIr7ff72RI/
GALmtl+g7s7gspwO4qyrc4IKIVsYL38y+3yQvdB7YInbjuIhe9IxzGb98TqKS/Jv
t1omasBGkjjl1k3PtSOWQW6nlHL4FQkOGh4lx9MAhqfsnbbhQX2vKUSwdQWqd9Wr
jn44c15ywRg9KXVoC/6wEDEI8+TxxiL5pwY9HPsl6iChblsjY0dTU7J3MsNoq0Xt
txNsjjrc0jm1yXoWzoc9/AnIgtPGk0Ssz3MpZvq24sLARusKNfBDR1RKbqHH+xQb
upEbtte9pydhMPDTYxcjb+EwLl+KUkc/L71gO0w4Qw/s5v0v4DkkkTfrXETwJ9Ld
nRMz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pJy/GVvttljLYDwyEWP
cPeuJ0NePUTgbxIm88+7qrXrDTc3hfkWimqN7/7xxJjzfHw26NXEVXPCZL9vuLVb
PerGYiLr+PJxahUlm3eO9VzlVSZ5V1+JpHs/teZbceN7tdJjPLcJtaKMR2/OFC+8
4cGoq3TzOVLl+1JJFHEKL+hIl+zfpzMYeXttoFvvEWplJWrESEXj17EZ/Q2v3ADt
2HQc3jZ3G8pGLaOvFm2mWcWtbUYjM5l95UUY/U2HbVOA6dZ6IF8uB4tMpYoj9iAk
mrFqdjxjm2GesH2M4bNEZl/7AhmtXsf/1AK+TXz6RR+GbmLdJLC3lFYsdJUpGzHn
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5827283710346150334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 15:28:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-01 15:28:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'employindy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29107026916400028846724180416174767480606319002673104219766630900822184335958852364840724669490591299446501933185646986617128194829747574571154042522318026580019196013426980870052409389016751548629730866333723114592653050314427692606216913588977287020807471745450625089400650079894172483247559134459348563284457317889515300001286759283130106759306586686751453525443433204182747775471735819911361907165598433538148824630211821427050585845970931623119694306292750128801943322413448734661443212144208171070800454776793301881399652059244702962307089602772224455273649016281583717088418277571689440540816188512754958723023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-682.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employindy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bea0c16526001a47a0d4fc7e35c494104e5786de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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