employindy.org
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 50:de:ab:a9:08:9a:41:be was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=employindy.org
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 50:de:ab:a9:08:9a:41:beSerial Number (int): 5827283710346150334
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: be:a0:c1:65:26:00:1a:47:a0:d4:fc:7e:35:c4:94:10:4e:57:86:de
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): 17:65:5d:b8:24:15:ec:4a:7a:6f:74:d6:e8:b3:48:cb:03:71:e3:d3
Fingerprint (sha256): 1e:9d:f4:b4:b5:54:75:b7:ae:d0:43:1f:ef:72:b5:9f:bd:fa:e9:61:fc:c5:b3:2b:1e:82:ee:1d:82:6b:9e:43
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-682.crl
Check the revocation status for certificate employindy.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for employindy.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.employindy.org
employindy.org
employindy.org
Other certificates including the domain name employindy.org
(limited to 100 certificates)
wadetrim.trubytraining.com
www.summitmortgagetraining.com
india.polo-development.com
bhsa.mysportsanalysis.com
www.summitmortgagetraining.com
wadetrim.trubytraining.com
farmviability.oahurcd.org
go.rescuevocations.org
academy.boulderinsight.com
www.frailtycertification.com
internal.hedgucation.assurehedge.com
www.educate.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
educate.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learning.servicon.com
www.learn-experiencemanitouregion.ca
employindy.org
university.foremostmedia.com
www.summitmortgagetraining.com
serpentine.polo-development.com
polopark.polo-development.com
learning.servicon.com
www.summitmortgagetraining.com
plataforma.pedago.cl
www.summitmortgagetraining.com
learn-rto8.com
uni.bradfordconsolidation.com
learning.servicon.com
www.summitmortgagetraining.com
learning.servicon.com
farmviability.oahurcd.org
farmviability.oahurcd.org
www.summitmortgagetraining.com
learning.servicon.com
www.summitmortgagetraining.com
trainingacademy.anywhere365.io
employindy.org
farmviability.oahurcd.org
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learning.servicon.com
www.summitmortgagetraining.com
polobern.polo-development.com
www.tridotacademy.com
australia.polo-development.com
bridgeyou.barlowcomputers.com
book.dragonnapper.com
competence.rosen-group.com
uni.airportlogistics.org
education.urbangreencouncil.org
helix21.ahacentre.org
book.dragonnapper.com
www.summitmortgagetraining.com
elearning.toyota.com.ph
www.summitmortgagetraining.com
employindy.org
www.summitmortgagetraining.com
academy.boulderinsight.com
educate.ekgguy.com
learning.travelalberta.com
farmviability.oahurcd.org
learning.employindy.org
uspa.polo-development.com
alp.arcsystechnologies.com
www.summitmortgagetraining.com
internal.hedgucation.assurehedge.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
ucdavis.boulderinsight.com
www.summitmortgagetraining.com
www.educate.ekgguy.com
www.learn-experiencemanitouregion.ca
learning.potawatomi.org
lms.singleuseendoscopy.com
smarterbahamas.com
www.bloombehive.com
www.pts.org
litifam-training.litify.com
educate.ekgguy.com
www.employindy.org
www.educate.ekgguy.com
www.summitmortgagetraining.com
learning.servicon.com
academy.evgo.com
www.summitmortgagetraining.com
www.tcacommunity.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
university.safefleet.net
www.summitmortgagetraining.com
trainingacademy.anywhere365.io
university.ambassadorsforbusiness.com
educate.ekgguy.com
elearning.toyota.com.ph
farmviability.oahurcd.org
university.tektonresearch.com
educate.ekgguy.com
www.summitmortgagetraining.com
india.polo-development.com
bhsa.mysportsanalysis.com
www.summitmortgagetraining.com
wadetrim.trubytraining.com
farmviability.oahurcd.org
go.rescuevocations.org
academy.boulderinsight.com
www.frailtycertification.com
internal.hedgucation.assurehedge.com
www.educate.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
educate.ekgguy.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learning.servicon.com
www.learn-experiencemanitouregion.ca
employindy.org
university.foremostmedia.com
www.summitmortgagetraining.com
serpentine.polo-development.com
polopark.polo-development.com
learning.servicon.com
www.summitmortgagetraining.com
plataforma.pedago.cl
www.summitmortgagetraining.com
learn-rto8.com
uni.bradfordconsolidation.com
learning.servicon.com
www.summitmortgagetraining.com
learning.servicon.com
farmviability.oahurcd.org
farmviability.oahurcd.org
www.summitmortgagetraining.com
learning.servicon.com
www.summitmortgagetraining.com
trainingacademy.anywhere365.io
employindy.org
farmviability.oahurcd.org
www.summitmortgagetraining.com
www.summitmortgagetraining.com
learning.servicon.com
www.summitmortgagetraining.com
polobern.polo-development.com
www.tridotacademy.com
australia.polo-development.com
bridgeyou.barlowcomputers.com
book.dragonnapper.com
competence.rosen-group.com
uni.airportlogistics.org
education.urbangreencouncil.org
helix21.ahacentre.org
book.dragonnapper.com
www.summitmortgagetraining.com
elearning.toyota.com.ph
www.summitmortgagetraining.com
employindy.org
www.summitmortgagetraining.com
academy.boulderinsight.com
educate.ekgguy.com
learning.travelalberta.com
farmviability.oahurcd.org
learning.employindy.org
uspa.polo-development.com
alp.arcsystechnologies.com
www.summitmortgagetraining.com
internal.hedgucation.assurehedge.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
ucdavis.boulderinsight.com
www.summitmortgagetraining.com
www.educate.ekgguy.com
www.learn-experiencemanitouregion.ca
learning.potawatomi.org
lms.singleuseendoscopy.com
smarterbahamas.com
www.bloombehive.com
www.pts.org
litifam-training.litify.com
educate.ekgguy.com
www.employindy.org
www.educate.ekgguy.com
www.summitmortgagetraining.com
learning.servicon.com
academy.evgo.com
www.summitmortgagetraining.com
www.tcacommunity.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
university.safefleet.net
www.summitmortgagetraining.com
trainingacademy.anywhere365.io
university.ambassadorsforbusiness.com
educate.ekgguy.com
elearning.toyota.com.ph
farmviability.oahurcd.org
university.tektonresearch.com
educate.ekgguy.com
Certificate
The complete raw certificate details for employindy.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIIUN6rqQiaQb4wDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw HhcNMjQwMzAxMTUyODU3WhcNMjUwMzAxMTUyODU3WjAZMRcwFQYDVQQDEw5lbXBs b3lpbmR5Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOaScvxl b7bZYy2A8MhFj3D3ridDXj1E4G8SJvPPu6q16w03N4X5Fopqje/+8cSY83x8NujV xFVzwmS/b7i1Wz3qxmIi6/jycWoVJZt3jvVc5VUmeVdfiaR7P7XmW3Hje7XSYzy3 CbWijEdvzhQvvOHBqKt08zlS5ftSSRRxCi/oSJfs36czGHl7baBb7xFqZSVqxEhF 49exGf0Nr9wA7dh0HN42dxvKRi2jrxZtplnFrW1GIzOZfeVFGP1Nh21TgOnWeiBf LgeLTKWKI/YgJJqxanY8Y5thnrB9jOGzRGZf+wIZrV7H/9QCvk18+kUfhm5i3SSw t5RWLHSVKRsx588CAwEAAaOCA1swggNXMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA9BgNVHR8ENjA0 MDKgMKAuhixodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcyczEtNjgy LmNybDBjBgNVHSAEXDBaME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYBBQUHAgEWMWh0 dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8w CAYGZ4EMAQIBMIGCBggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9v Y3NwLnN0YXJmaWVsZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0cDovL2NlcnRp ZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmaWcyLmNydDAf BgNVHSMEGDAWgBQlRYFoUCY4PTstLL7Natm2PbNmYzAtBgNVHREEJjAkghJ3d3cu ZW1wbG95aW5keS5vcmeCDmVtcGxveWluZHkub3JnMB0GA1UdDgQWBBS+oMFlJgAa R6DU/H41xJQQTleG3jCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYATnWjJ1ya EMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGN+qIDjgAABAMARzBFAiAYWTGV L2lEVCPg+AmukropkkVngpcCoawR+OksRrVEbwIhAOMyY9ZyRZ8PeDixwOzLuC4/ DiivX+Qw8/Ny5pv0H+K6AHcAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowu ebgAAAGN+qIEQgAABAMASDBGAiEA0mFaWrg1uaV9Yd4zIu8zoC11f6wUawAAlnHB SF/7oJwCIQCbDHuUguqSF5fCCvKPBiXEYg/YIvFjWY4GyB8SyIQ+VQB1AMz7D2qF cQll/pWbU87psnwi6YVcDZeNtql+VMD+TA2wAAABjfqiBK4AAAQDAEYwRAIgagbT JOiUG7IqFNwRjmKJAirsoxG4U+wSfJKjv9iV0iICIG/9y1jfNAqDYX73OzRI59Fn nvWvKPcaDRQCrAdqtKycMA0GCSqGSIb3DQEBCwUAA4IBAQB1SNAjmXIr7ff72RI/ GALmtl+g7s7gspwO4qyrc4IKIVsYL38y+3yQvdB7YInbjuIhe9IxzGb98TqKS/Jv t1omasBGkjjl1k3PtSOWQW6nlHL4FQkOGh4lx9MAhqfsnbbhQX2vKUSwdQWqd9Wr jn44c15ywRg9KXVoC/6wEDEI8+TxxiL5pwY9HPsl6iChblsjY0dTU7J3MsNoq0Xt txNsjjrc0jm1yXoWzoc9/AnIgtPGk0Ssz3MpZvq24sLARusKNfBDR1RKbqHH+xQb upEbtte9pydhMPDTYxcjb+EwLl+KUkc/L71gO0w4Qw/s5v0v4DkkkTfrXETwJ9Ld nRMz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pJy/GVvttljLYDwyEWP cPeuJ0NePUTgbxIm88+7qrXrDTc3hfkWimqN7/7xxJjzfHw26NXEVXPCZL9vuLVb PerGYiLr+PJxahUlm3eO9VzlVSZ5V1+JpHs/teZbceN7tdJjPLcJtaKMR2/OFC+8 4cGoq3TzOVLl+1JJFHEKL+hIl+zfpzMYeXttoFvvEWplJWrESEXj17EZ/Q2v3ADt 2HQc3jZ3G8pGLaOvFm2mWcWtbUYjM5l95UUY/U2HbVOA6dZ6IF8uB4tMpYoj9iAk mrFqdjxjm2GesH2M4bNEZl/7AhmtXsf/1AK+TXz6RR+GbmLdJLC3lFYsdJUpGzHn zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5827283710346150334 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 15:28:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-01 15:28:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'employindy.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29107026916400028846724180416174767480606319002673104219766630900822184335958852364840724669490591299446501933185646986617128194829747574571154042522318026580019196013426980870052409389016751548629730866333723114592653050314427692606216913588977287020807471745450625089400650079894172483247559134459348563284457317889515300001286759283130106759306586686751453525443433204182747775471735819911361907165598433538148824630211821427050585845970931623119694306292750128801943322413448734661443212144208171070800454776793301881399652059244702962307089602772224455273649016281583717088418277571689440540816188512754958723023 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-682.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employindy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employindy.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bea0c16526001a47a0d4fc7e35c494104e5786de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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