www.yvesrocher.pt
- YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A. -
Issued by MULTICERT SSL Certification Authority 001
About this certificate
This digital certificate with serial number 32:9b:e2:66:a3:84:31:e0:61:97:55:ab:3e:c8:fa:fe was issued on by MULTICERT - Serviços de Certificação Electrónica S.A..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A.
Organization:
YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A.
Organization unit: Certificado SSL/TLS
Organization unit: Certificado SSL/TLS
Locality:
Maia
Country: PT
Country: PT
MULTICERT - Serviços de Certificação Electrónica S.A.
Organization:
MULTICERT - Serviços de Certificação Electrónica S.A.
Organization unit: Certification Authority
Organization unit: Certification Authority
Country:
PT
This certificate has expire since
Certificate Details
Serial Number (hex): 32:9b:e2:66:a3:84:31:e0:61:97:55:ab:3e:c8:fa:feSerial Number (int): 67270797758767564004219720479218924286
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: fc:7a:50:56:53:b7:4e:f0:3b:f9:a2:9b:19:7a:0f:3b:95:5d:e7:38
AuthorityKeyId: b0:02:39:52:0a:4f:73:9a:c8:d9:81:45:36:5d:11:9d:5f:23:39:97
Fingerprint (sha1): 4b:7b:0f:7d:48:7d:7b:3a:4d:a7:d9:c8:75:00:33:af:91:bb:99:e5
Fingerprint (sha256): 31:3a:fa:c1:9f:44:2a:a0:ac:45:25:2d:9c:1e:2e:99:c4:66:bc:5a:8c:44:bb:a5:4e:2c:c5:10:5b:9c:42:47
Issuing Certificate URL: http://pki.multicert.com/cert/SSL_CA01.cer
Revocation information
OCSP Server: http://ocsp.multicert.com/ocspCRL Distribution Point: http://pki.multicert.com/crl/crl_ssl001.crl
Check the revocation status for certificate www.yvesrocher.pt
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.yvesrocher.pt
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.yvesrocher.pt
Other certificates including the domain name yvesrocher.pt
(limited to 100 certificates)
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
newsletter.yvesrocher.pt
ssl3.ipaper.io
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
www.yvesrocher.pt
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
newsletter.yvesrocher.pt
ssl3.ipaper.io
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl3.ipaper.io
ssl3.ipaper.io
www.yvesrocher.pt
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
www.yvesrocher.pt
mkt.switchdigital.pt
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl4.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl1.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
ssl3.ipaper.io
Certificate
The complete raw certificate details for www.yvesrocher.pt in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIQTCCBimgAwIBAgIQMpviZqOEMeBhl1WrPsj6/jANBgkqhkiG9w0BAQsFADCB pzELMAkGA1UEBhMCUFQxQjBABgNVBAoMOU1VTFRJQ0VSVCAtIFNlcnZpw6dvcyBk ZSBDZXJ0aWZpY2HDp8OjbyBFbGVjdHLDs25pY2EgUy5BLjEgMB4GA1UECwwXQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkxMjAwBgNVBAMMKU1VTFRJQ0VSVCBTU0wgQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkgMDAxMB4XDTE5MDYyNzE3MzY1OFoXDTE5MDgy MTIyNTkwMFowgYsxCzAJBgNVBAYTAlBUMQ0wCwYDVQQHDARNYWlhMTMwMQYDVQQK DCpZVkVTIFJPQ0hFUiAoUE9SVFVHQUwpIC0gQ09TTcOJVElDT1MsIFMuQS4xHDAa BgNVBAsME0NlcnRpZmljYWRvIFNTTC9UTFMxGjAYBgNVBAMMEXd3dy55dmVzcm9j aGVyLnB0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RpVeajWrz2L HUh1AgmjOaRtg0OzfZRt9ZVVSO+cULKAE0qtBlNZKFxPRbZgtIDlAi79lxtBAcpH YKmYHKPjxZvxglPUADym3apRPYu527GDI+yki9N/pYqQegwzPefAydu7j6sWGLmQ dZdD/QvLMv2oZezWYLmUS5XtNZ1tZiAG6iTSuVTDWGtY6Po8egxA1bPbzOaq/6FE gj9n6cJPnvzo64/YNEUYdQ+4vokdYvZ7cv2i3ywzLGqVz4y3klsghg+uCqWINL0C p36ESgE//qTXTikMLERfXw2vBWmDuGMjMGWH9oDqVO1mfb6ATAMDgRZcd+UG3gnY c97vTY0b7wIDAQABo4IDgTCCA30wDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBSw AjlSCk9zmsjZgUU2XRGdXyM5lzByBggrBgEFBQcBAQRmMGQwNgYIKwYBBQUHMAKG Kmh0dHA6Ly9wa2kubXVsdGljZXJ0LmNvbS9jZXJ0L1NTTF9DQTAxLmNlcjAqBggr BgEFBQcwAYYeaHR0cDovL29jc3AubXVsdGljZXJ0LmNvbS9vY3NwMEIGA1UdLgQ7 MDkwN6A1oDOGMWh0dHA6Ly9wa2kubXVsdGljZXJ0LmNvbS9jcmwvY3JsX3NzbDAw MV9kZWx0YS5jcmwwHAYDVR0RBBUwE4IRd3d3Lnl2ZXNyb2NoZXIucHQwagYDVR0g BGMwYTARBg8rBgEEAYHDbgEBAQEAAREwCAYGBACPegEHMDgGDSsGAQQBgcNuAQEB AAcwJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9wa2kubXVsdGljZXJ0LmNvbTAIBgZn gQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDwGA1UdHwQ1MDMw MaAvoC2GK2h0dHA6Ly9wa2kubXVsdGljZXJ0LmNvbS9jcmwvY3JsX3NzbDAwMS5j cmwwHQYDVR0OBBYEFPx6UFZTt07wO/mimxl6DzuVXec4MA4GA1UdDwEB/wQEAwIE sDCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHYAdH7agzGtMxCRIZzOJU9CcMK/ /V5CIAjGNzV55hB7zFYAAAFrmgxC0AAABAMARzBFAiEA4SdjSBbn48L0SbCB4yL0 ymcbWoAs4bApm7BLX52ewyUCIHx5LfR3VFd9h+KtM+jWWeK3pDCA6MlB4px/gZHM YvOoAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFrmgw8TQAA BAMARjBEAiA36Ra34ihuBaCTK8CS66Slid1IBb3wiQTYIFHjfTDZHgIgZbyCz9nQ bIOUwC05hBvX7OSUBx0jIWMnNn1v7TTt1FAAdQBj8tvN6DvMLM8LcoQnV2szpI1h d4+9daY4scdoVEvYjQAAAWuaDDXfAAAEAwBGMEQCIBWgEar7/LjrpoTxFXOv8Utw S8CPduwb7gWkaMWyLpfhAiAryalcZvts/uOnwYcGcwvLmUsJAHCl+RiQb9KLzLzr oDANBgkqhkiG9w0BAQsFAAOCAgEARnTyuGHzPaWHU82ZNqEDdBkkgK8WOnuEJwtm 0hfi447tbDg2qVwbnWIgPmUeNMHsmH3+NyxfiYkIQOyLaqUuDd2olvCaogS3A3aV EG/6GOciVXwFh+YGCahDKI1ru8F/2jmwTw5hp0XnT4NsIGHANAeM/aU0l5ysVYct /15ihm2L6fCUA8YpEXjf0DdKOtZzwFrGV1uiB0vXA8Wwg0B9usG9MOgfHtgGP1xJ FtRx41iG0Q2PXzfQoMeCFoZUgEBlGLoUSOxGUQf3MAPK2F4DXIpM/xHOXHi6PyYr D7SmzLPazbPQx4TxcBlDsWNb0y+delyt5ZIFlWo0zHbH4FD8ju+NOH9nagO2kZ0o 6U/SuBk9ZGEejkpsqMTD5Om7G8P3ZK5k4jdtkOId+/WJq93J1BaLJH2C+hkgFrR7 V151e6qhs2xRX1YnVnzMNdHtBaAx+KmW2ujETFlG+tzUxZtGU8+vnSF2ed3kkrMu p5uZULpCPyccyE28qd8nR/54E/i71PgHWaP0lr+sUjX0v0iXJBPHBvZhCxy5A9HN 7zbIZF8bixCITCR9rW8NTZazm8sIsI+TyY8mVHky2CP5ATf7vyglt+FKD3BGNsbG xDBNlnTKZl5dPngq+nsgQiz798oOonFhyRbn6s4ZGF3hKZEsK3UeyW3wuWEKE0qI b8uUJeA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RpVeajWrz2LHUh1Agmj OaRtg0OzfZRt9ZVVSO+cULKAE0qtBlNZKFxPRbZgtIDlAi79lxtBAcpHYKmYHKPj xZvxglPUADym3apRPYu527GDI+yki9N/pYqQegwzPefAydu7j6sWGLmQdZdD/QvL Mv2oZezWYLmUS5XtNZ1tZiAG6iTSuVTDWGtY6Po8egxA1bPbzOaq/6FEgj9n6cJP nvzo64/YNEUYdQ+4vokdYvZ7cv2i3ywzLGqVz4y3klsghg+uCqWINL0Cp36ESgE/ /qTXTikMLERfXw2vBWmDuGMjMGWH9oDqVO1mfb6ATAMDgRZcd+UG3gnYc97vTY0b 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 67270797758767564004219720479218924286 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT - Serviços de Certificação Electrónica S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MULTICERT SSL Certification Authority 001' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 17:36:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 22:59:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'YVES ROCHER (PORTUGAL) - COSMÉTICOS, S.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certificado SSL/TLS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.yvesrocher.pt' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30941370440657817333440698664291133741847987048539333363799862495930204748542162604025801825893502832640532063655584213616030505006299548245925992240954487178439007451585002755173289273475066831198528006081854683644487480184756418595229795243690250039397463506853444161778445568737675323362090955260459594407423731507235979522526479273503913984773746379371396088396187313678782915583344232462318529624237264985708974717878935758485293581147779112965260178326492242092207350647150668393407458837795863013746510763752023725584764536717229495224131669054755902085267084886473410487008759007661055874622342505045374606319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b00239520a4f739ac8d98145365d119d5f233997 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/cert/SSL_CA01.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.multicert.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.46 (freshestCRL) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001_delta.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvesrocher.pt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.1.0.1.17 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25070.1.1.1.0.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://pki.multicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.multicert.com/crl/crl_ssl001.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fc7a505653b74ef03bf9a29b197a0f3b955de738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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