www.frey-raum.net

- frey-raum e.k. -

Issued by StartCom Class 4 EV Server CA

About this certificate

This digital certificate with serial number 36:1d:ce:08:27:ce:91:83:36:61:05:4e:d3:3d:f2:9e was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

frey-raum e.k.

Company registration number: HRA705186
Organization: frey-raum e.k.
Address: Fabrikstrasse 5
Postal code: 76185
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 36:1d:ce:08:27:ce:91:83:36:61:05:4e:d3:3d:f2:9e
Serial Number (int): 71933067203806260761709979562464375454
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6e:72:65:fe:d8:46:22:e0:5f:8f:42:43:83:52:bf:29:9a:4f:d5:bb
AuthorityKeyId: 0e:d8:0d:d2:66:1d:ab:72:b6:89:65:4b:64:3d:7e:18:27:d4:8c:de

Fingerprint (sha1): aa:28:a8:6f:52:89:04:7a:7f:5c:47:d6:a9:7f:99:fb:71:35:22:8b
Fingerprint (sha256): 33:8b:6b:c1:75:26:c6:de:82:e5:7b:05:a4:cf:85:b2:91:80:69:68:bc:89:ac:4d:04:ec:2b:c9:57:44:85:2a

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server4.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server4.crl

Check the revocation status for certificate www.frey-raum.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.frey-raum.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.frey-raum.net

Other certificates including the domain name frey-raum.net

(limited to 100 certificates)
dev2.frey-raum.net
chat.frey-raum.net
www.frey-raum.net
*.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
git.frey-raum.net
www.frey-raum.net
frey-raum.net
chat.frey-raum.net
www.frey-raum.net
chat.frey-raum.net
jira.frey-raum.net
bitbucket.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
conf.frey-raum.net
chat.frey-raum.net
vpn.frey-raum.net
www.frey-raum.net
*.frey-raum.net
crm.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
vpn.frey-raum.net
cloud.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
conf.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
mail.frey-raum.net
dev2.frey-raum.net
frey-raum.net
www.frey-raum.net
www.frey-raum.net
mail.frey-raum.net
frey-raum.net
frey-raum.net
frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
www.frey-raum.net
www.frey-raum.net
frey-raum.net
www.frey-raum.net
secure.frey-raum.net
chat.frey-raum.net
mail.frey-raum.net
frey-raum.net
chat.frey-raum.net
crm.frey-raum.net

Certificate

The complete raw certificate details for www.frey-raum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71933067203806260761709979562464375454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 4 EV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-06 10:43:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 10:43:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA705186'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '76185'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fabrikstrasse 5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'frey-raum e.k.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.frey-raum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800981256968942748891958171855756826480109628720480717470522581005707502099542937599481488270543113004033078346455351319735647937449228784636574976173535163201798306766487572526559567795971010420405813787430468007348854021107848245503647917854761341697171164331347812528661229553884925361222042389052228283974997049394906463876117389265689764302967657906050683256369366951254527413997374781658228926737951882215222614273672993740053503995484272559800581251272420614046639304937773840530362507993561508340692135877678195561363965834250622909243214850122832401503195704292283162758381134105681079882819717063427201738164352586639607032451158365006659844487071018100657154012923935403683830336702342317878772385250015304372038417021487616237924173435166477890630961931546448255240266274354496938655022976342074031534285385617039060428371831719034484334130424538675902206940028050071332393628154637388417758389119848827653800302866522884315077942925230707269467023141557100568534502101736654915119450986460906987951688325357562046493990373424253022133011977669915954548407625630876676350163817055350284607312736234312273034867865612690333391566843614569243276138171776972518640716881977241236181348594326937419951124981670698580761739049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e7265fed84622e05f8f42438352bf299a4fd5bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0ed80dd2661dab72b689654b643d7e1827d48cde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frey-raum.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.1.1 (StartCom EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (548 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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