erp.leket.org
Issued by COMODO RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 11:89:49:91:b9:89:00:0e:07:4e:5c:54:57:68:1f:36 was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=erp.leket.org,OU=Domain Control Validated+OU=EssentialSSL
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 11:89:49:91:b9:89:00:0e:07:4e:5c:54:57:68:1f:36Serial Number (int): 23309712759367822277760215901801029430
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 0c:31:e6:73:df:c8:11:1a:cf:3a:98:13:99:47:1e:ee:18:4d:9d:56
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7
Fingerprint (sha1): 90:fa:7b:7b:64:dc:75:78:4c:f1:e8:2f:45:9f:58:2b:ae:a3:12:ac
Fingerprint (sha256): 2b:4f:78:26:e1:45:ae:8b:52:03:f8:71:54:a0:6f:ba:9d:64:87:c5:84:aa:3a:68:4d:b5:cf:87:c2:56:f8:d0
Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
Check the revocation status for certificate erp.leket.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for erp.leket.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
erp.leket.org
www.erp.leket.org
www.erp.leket.org
Other certificates including the domain name leket.org
(limited to 100 certificates)
ssl387364.cloudflaressl.com
m.leket.org
ssl387362.cloudflaressl.com
sni116151.cloudflaressl.com
ssl387364.cloudflaressl.com
concert.leket.org
ssl387364.cloudflaressl.com
www.dinner.leket.tempurl.co.il
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
sni116151.cloudflaressl.com
*.leket.org
ssl387364.cloudflaressl.com
sni116151.cloudflaressl.com
ssl387364.cloudflaressl.com
usdinner.leket.org
ssl387363.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
purim.leket.org
ssl387364.cloudflaressl.com
erp.leket.org
ssl387364.cloudflaressl.com
leket.org
ssl387362.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
mail.leket.org
ssl387362.cloudflaressl.com
concert.leket.org
purim.leket.org
sni116151.cloudflaressl.com
sni.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
concert.leket.org
sni116151.cloudflaressl.com
sni.cloudflaressl.com
ssl387362.cloudflaressl.com
m.leket.org
usdinner.leket.org
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
sni.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
m.leket.org
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387363.cloudflaressl.com
dinner.leket.org
sni116151.cloudflaressl.com
mail.leket.org
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
admin.leket.org
ssl387363.cloudflaressl.com
*.leket.org
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
sni116151.cloudflaressl.com
ssl387364.cloudflaressl.com
concert.leket.org
ssl387364.cloudflaressl.com
sni.cloudflaressl.com
ssl387364.cloudflaressl.com
dinner.leket.org
ssl387364.cloudflaressl.com
m.leket.org
ssl387362.cloudflaressl.com
sni116151.cloudflaressl.com
ssl387364.cloudflaressl.com
concert.leket.org
ssl387364.cloudflaressl.com
www.dinner.leket.tempurl.co.il
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
sni116151.cloudflaressl.com
*.leket.org
ssl387364.cloudflaressl.com
sni116151.cloudflaressl.com
ssl387364.cloudflaressl.com
usdinner.leket.org
ssl387363.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
purim.leket.org
ssl387364.cloudflaressl.com
erp.leket.org
ssl387364.cloudflaressl.com
leket.org
ssl387362.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
mail.leket.org
ssl387362.cloudflaressl.com
concert.leket.org
purim.leket.org
sni116151.cloudflaressl.com
sni.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
concert.leket.org
sni116151.cloudflaressl.com
sni.cloudflaressl.com
ssl387362.cloudflaressl.com
m.leket.org
usdinner.leket.org
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
sni.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
m.leket.org
ssl387363.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387362.cloudflaressl.com
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387363.cloudflaressl.com
ssl387363.cloudflaressl.com
dinner.leket.org
sni116151.cloudflaressl.com
mail.leket.org
ssl387364.cloudflaressl.com
ssl387363.cloudflaressl.com
admin.leket.org
ssl387363.cloudflaressl.com
*.leket.org
ssl387362.cloudflaressl.com
ssl387362.cloudflaressl.com
sni116151.cloudflaressl.com
ssl387364.cloudflaressl.com
concert.leket.org
ssl387364.cloudflaressl.com
sni.cloudflaressl.com
ssl387364.cloudflaressl.com
dinner.leket.org
ssl387364.cloudflaressl.com
Certificate
The complete raw certificate details for erp.leket.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzTCCBbWgAwIBAgIQEYlJkbmJAA4HTlxUV2gfNjANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xODA4MjcwMDAwMDBaFw0yMDA4MjYyMzU5NTlaMFIxITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEVMBMGA1UECxMMRXNzZW50aWFsU1NMMRYw FAYDVQQDEw1lcnAubGVrZXQub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA3Y1OUGsdcoSmMX0mJ/75uDZDZXxuHa1To6JI9ALVrkdl14e9ooNPPSzS kt42wTwEuogsQvckBABiwdAtX6+seBmU7dsb0Uyk5r+LNIjGaB4nz3tTci/FOSAY r+p1UyfRLEbBbWX4djphjch2SXRffRKLH4madRB8RlXhhmDhepECSmOWWNXuZEnq Fv+vybIIe5i+ndUtwjqo1+MqGxoFDlIY9oncZhkPmbpoW3RkuRJo8xuNGNP0uZKz BfhR9UjjTWnS/vKPtpjK3gOuLkJAI9hvQ/eki9mAw2cam14AjHcanN0o+I7BzUwi vM5b6XmXIFWLy1TIFBej5fPC/XPYFQIDAQABo4IDXjCCA1owHwYDVR0jBBgwFoAU kK9qOpRaC9iQ6hJWc99DtDoo2ucwHQYDVR0OBBYEFAwx5nPfyBEazzqYE5lHHu4Y TZ1WMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysGAQQBsjEBAgIHMCswKQYI KwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgGBmeBDAEC ATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01P RE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGFBggrBgEF BQcBAQR5MHcwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NP TU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYB BQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTArBgNVHREEJDAigg1lcnAu bGVrZXQub3JnghF3d3cuZXJwLmxla2V0Lm9yZzCCAX0GCisGAQQB1nkCBAIEggFt BIIBaQFnAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFlepE7 HQAABAMARjBEAiBrC5t2XcD3vNovie3HdQt5Gco4WcEqO4Hfp/Im7NfrmwIgO79t xycuiVnf/2h5tIs33TWQ5g1A6QG1f5o98mPxGWUAdgBep3P531bA57U2SH3QSeAy epGaDIShEhKEGHWWgXFFWAAAAWV6kT1NAAAEAwBHMEUCIFNh81jNN36XYNMW51q+ ta+yhkEVvcsYu4FKKK/WtlCMAiEAiKIsCqBfD+LMIBm2Y6gd3oN0MrT6X2xpVeab vnPqLn4AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWV6kTu1 AAAEAwBHMEUCIBLEqP9tKED1qFYrQfx5NU/DpMKEXn9Td+IAG/gQu+DQAiEAv37r PSbBRIEiL5WsBaoZ4VxmMK4NS16LUuZiH2wTxKgwDQYJKoZIhvcNAQELBQADggEB AI2JNJsZYLoBpqyQfGQ8CdegyWYEUPUW2Q/GXz2dDQZmyacnymbDK8JG5wPRhibJ 4C+AGL+NZkO/Wzxau3P6ReMukHi+xKFymJF7G0YvkT4d+Wx2K4p8F2uQO+Jwlq+3 1SKRgs+L50367JR9XVddsLw0vf4bMR1y38dmU+tCoj8bzsAgpz3bBNlhe/b4ZOfe WksFvYY71qsX6LXAD757YuxQJggBeY+waN322STS0QqmMPPDLb/TkOi4wMftgrnI 310wCDzPXUSyKTl97lvOAtqAE+ST2f8H9bApXcZgA3SPHlT8Q8ar1Gj7SB/l6NGB FwQFnBknQ5UgMwJtlcKsZ6c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y1OUGsdcoSmMX0mJ/75 uDZDZXxuHa1To6JI9ALVrkdl14e9ooNPPSzSkt42wTwEuogsQvckBABiwdAtX6+s eBmU7dsb0Uyk5r+LNIjGaB4nz3tTci/FOSAYr+p1UyfRLEbBbWX4djphjch2SXRf fRKLH4madRB8RlXhhmDhepECSmOWWNXuZEnqFv+vybIIe5i+ndUtwjqo1+MqGxoF DlIY9oncZhkPmbpoW3RkuRJo8xuNGNP0uZKzBfhR9UjjTWnS/vKPtpjK3gOuLkJA I9hvQ/eki9mAw2cam14AjHcanN0o+I7BzUwivM5b6XmXIFWLy1TIFBej5fPC/XPY FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 23309712759367822277760215901801029430 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erp.leket.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27968345941011561601920348674039881880623510865199994006250910510119324384362481330933498127913590729800053792654539409485252012336084235170560805302902110935094926117494811972690105847464677034959077984279833004612575006880630728568905034154110238831373281152753393807526944600117035382956644596560893583428491195324553708246311595059569701687011958124599002358604990099855923467900565251815212911274979405463981267573478137472457559033198929021739085411659916982172808923753373991351157620583405621279454794872997251388395201961190349441894969885821948952796085230358302196183484809272495126274029555092469295863829 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c31e673dfc8111acf3a981399471eee184d9d56 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.leket.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erp.leket.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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