*.knightfrank.com
Issued by COMODO RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 43:2f:f0:07:db:b5:55:78:0c:4b:df:0e:fa:5e:4f:00 was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.knightfrank.com,OU=Domain Control Validated+OU=Issued through Knight Frank LLP E-PKI Manager+OU=COMODO SSL Wildcard
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 43:2f:f0:07:db:b5:55:78:0c:4b:df:0e:fa:5e:4f:00Serial Number (int): 89307182070838950723719314564842409728
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: c7:da:7a:3a:5d:c0:7d:2d:4f:b9:ab:28:38:cc:93:4a:23:08:80:8f
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7
Fingerprint (sha1): 9f:02:44:ad:c4:93:28:15:2a:b7:64:f6:9d:e5:dd:f6:25:f9:cc:5d
Fingerprint (sha256): 2a:39:c5:42:b5:f1:6b:05:b3:e4:10:45:90:ec:eb:e4:eb:cb:d6:d8:d4:e5:52:44:cf:58:23:ab:af:f1:c9:05
Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
Check the revocation status for certificate *.knightfrank.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.knightfrank.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.knightfrank.com
knightfrank.com
knightfrank.com
Other certificates including the domain name knightfrank.com
(limited to 100 certificates)
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
globalprotect.in.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
mail.tz.knightfrank.com
webmail.ke.knightfrank.com
www.acumenthirdsector.net
mail.knightfrank.com
mail.tz.knightfrank.com
secure.knightfrank.com
support4.cdnetworks.net
remote.kfdublin.ie
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
sip.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
mail.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
mail.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
meet.hk.knightfrank.com
lyncweb.au.knightfrank.com
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
vxprint.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
mail.knightfrank.com
mylets.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
*.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
go.th.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
sip.au.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
globalprotect.in.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
mail.tz.knightfrank.com
webmail.ke.knightfrank.com
www.acumenthirdsector.net
mail.knightfrank.com
mail.tz.knightfrank.com
secure.knightfrank.com
support4.cdnetworks.net
remote.kfdublin.ie
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
sip.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
mail.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
mail.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
meet.hk.knightfrank.com
lyncweb.au.knightfrank.com
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
vxprint.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
mail.knightfrank.com
mylets.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
*.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
go.th.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
sip.au.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
Certificate
The complete raw certificate details for *.knightfrank.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIQQy/wB9u1VXgMS98O+l5PADANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xNTAzMjcwMDAwMDBaFw0xNzA1MDIyMzU5NTlaMIGVMSEwHwYDVQQLExhE b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxNjA0BgNVBAsTLUlzc3VlZCB0aHJvdWdo IEtuaWdodCBGcmFuayBMTFAgRS1QS0kgTWFuYWdlcjEcMBoGA1UECxMTQ09NT0RP IFNTTCBXaWxkY2FyZDEaMBgGA1UEAxQRKi5rbmlnaHRmcmFuay5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGG+b6IjFT+q2+mMjyeqZprM9vNgkh LExzwgC2Nz/ecDzj+OG5ktoWMKg30SJCtkX+8SnWAk+MU9lLV/h0K6cvXEuqQoD3 LRi+xBg1JXuF3M8wuLTnrIjGewk3PjeTmVswz69vHdageXLjNUFgQKgsCdFHCzdD NPfw0Lr6msSR3NFKCXaG2kOg20BxFKzwtUJpqqSVtHkbhlKfJixAsZcFWZUOatpL rJTHVJsarqrcEh3FjVYoBSxF/Aw7jMi+AdUZzlrc9IjrbxePwcNoN1ALROwuXg5+ AG+x9vQAwiAgJ2R2T2ePKVk+NUoZfxQTaqK3EyFKH2tf4FZgG08DK750843beq4U K+BxExBrfuKykO4liO4hH6zjycbPCBC0YzYEocRhf+nK07znnc92M/2pKQFVtI1f ld2JtJn73XoxMqeHiWDCVtdXMFe5myPSLo7ATafVy9DQW5fecXDOYc3uGBAdh2ed z2VnZcJQVfuUycTAM9HYpt+XzHl1TxxgXLW+XTja6sma9Rb5djdpuZ/W8EdZ2gMV xHmOvosJlYlTqG7azfjeGafVuc+A4kG5r8vMwliheZzIA93z+IiZopV+yTawRgp7 pr/w07pWzeRlvXkQPqctLguolFlnJWcxBocBC0lJNPFER2G1Hi2Hh3Hgo/IU2dRv maLrtUl1VE8xqwIDAQABo4IB3zCCAdswHwYDVR0jBBgwFoAUkK9qOpRaC9iQ6hJW c99DtDoo2ucwHQYDVR0OBBYEFMfaejpdwH0tT7mrKDjMk0ojCICPMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBPBgNVHSAESDBGMDoGCysGAQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0 dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgGBmeBDAECATBUBgNVHR8ETTBL MEmgR6BFhkNodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5W YWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGFBggrBgEFBQcBAQR5MHcwTwYI KwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFp blZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6 Ly9vY3NwLmNvbW9kb2NhLmNvbTAtBgNVHREEJjAkghEqLmtuaWdodGZyYW5rLmNv bYIPa25pZ2h0ZnJhbmsuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBJXvn5CtSDFuQt cxUScvgkBRZAH0e0NK4Mhql1I5jvFoopFmiwmdHAV64ZAVK8JgGiZCI2UauOGKdf K8zfgumTfAE4124RnDdwQRxHdqk+WdiRbvP3sXWVIPGluHiOSr2SUyGY62GOtnaK BvuXjiDdS1fVoTPRR30zonFYH7/HH7PVnOsHQJOMzMIGE46ceBtw/Nna+MKlEb4H F1ex5ObbGQGvgwnqzQsN3irsKc0uYIcepReWdYsaOlTIukuY8wtrMos9CFtS1REi fXLh/5LmhawDgRi5DKmx9v4+8N0XF92yzRTE8lD/iaM8aVjOVtp0Axy6SOGtDdR6 Mzk6cXsM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxhvm+iIxU/qtvpjI8nqm aazPbzYJISxMc8IAtjc/3nA84/jhuZLaFjCoN9EiQrZF/vEp1gJPjFPZS1f4dCun L1xLqkKA9y0YvsQYNSV7hdzPMLi056yIxnsJNz43k5lbMM+vbx3WoHly4zVBYECo LAnRRws3QzT38NC6+prEkdzRSgl2htpDoNtAcRSs8LVCaaqklbR5G4ZSnyYsQLGX BVmVDmraS6yUx1SbGq6q3BIdxY1WKAUsRfwMO4zIvgHVGc5a3PSI628Xj8HDaDdQ C0TsLl4OfgBvsfb0AMIgICdkdk9njylZPjVKGX8UE2qitxMhSh9rX+BWYBtPAyu+ dPON23quFCvgcRMQa37ispDuJYjuIR+s48nGzwgQtGM2BKHEYX/pytO8553PdjP9 qSkBVbSNX5XdibSZ+916MTKnh4lgwlbXVzBXuZsj0i6OwE2n1cvQ0FuX3nFwzmHN 7hgQHYdnnc9lZ2XCUFX7lMnEwDPR2Kbfl8x5dU8cYFy1vl042urJmvUW+XY3abmf 1vBHWdoDFcR5jr6LCZWJU6hu2s343hmn1bnPgOJBua/LzMJYoXmcyAPd8/iImaKV fsk2sEYKe6a/8NO6Vs3kZb15ED6nLS4LqJRZZyVnMQaHAQtJSTTxREdhtR4th4dx 4KPyFNnUb5mi67VJdVRPMasCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 89307182070838950723719314564842409728 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Knight Frank LLP E-PKI Manager' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Wildcard' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.knightfrank.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808214178850701807154695036809948770022440936405356659314430521575839922807117077200624502579804227190944369527924233874530763439240135668649388732600918208327061427080318105132696460487369124960000382336064007286379903613129617137938694909355522785337248088273719231776643253158947596174119811428088487661827628253106407035255106146573692341186077162136994065741401350814614456420733116562882676773154225252191547898103635576319571582284708558603466535692088304501897712821287800733842907826088132910681172595736561853998754100664560159917371461548243814143596521845434414537903035395149038857119017214387305189688063491942250074254821889552292779216316281410191573033484773878737463880321721688215981911659160351045807435279250951501698792582072285622950061831784522299381741724098946265423070895627827784863544369698703262537985846146087637998833874169813217057405854953299288796638986612126717380012450549342153135349182986978217085252237222540293132761625302883786499777155169132205028570083531451261933181399719720163400326213486131416250774092175261591088762564584554757361612423543199702553849501569821454981628879119670176743183114416719838149225501783879906449591438903143471320465672562050456947448990860117246689145729451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c7da7a3a5dc07d2d4fb9ab2838cc934a2308808f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knightfrank.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knightfrank.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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