www.nikastic.com

- Nikastic, LLC. -

Issued by COMODO RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number ea:ad:c6:18:40:0e:f0:1f:79:7c:82:ba:ec:0e:62:05 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nikastic, LLC.

Company registration number: 4419125
Organization: Nikastic, LLC.
Organization unit: COMODO EV SSL
Address: 347 5TH AVE STE 1402-124
Postal code: 10016
State / Province: NY
Locality: New York
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ea:ad:c6:18:40:0e:f0:1f:79:7c:82:ba:ec:0e:62:05
Serial Number (int): 311941636208599362350914331493081702917
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2c:c5:93:38:8f:5c:63:04:4c:a8:42:49:fd:a8:43:14:1a:a4:69:01
AuthorityKeyId: 39:da:ff:ca:28:14:8a:a8:74:13:08:b9:e4:0e:a9:d2:fa:7e:9d:69

Fingerprint (sha1): 1b:96:9e:73:6a:c3:02:d3:f5:1e:d8:3e:c4:23:3a:a2:2d:d9:d2:f3
Fingerprint (sha256): 33:d2:f9:bc:e3:cd:74:03:e9:3d:2c:33:54:52:07:a8:76:fa:e5:b7:f0:b3:06:3f:a1:1f:e2:1c:de:7c:01:e8

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate www.nikastic.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nikastic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nikastic.com
nikastic.com

Other certificates including the domain name nikastic.com

(limited to 100 certificates)
nikastic.com
nikastic.com
games.nikastic.com
translation.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
btc.nikastic.com
games.nikastic.com
sni216894.cloudflaressl.com
movietv.nikastic.com
sni216894.cloudflaressl.com
btc.nikastic.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
nikastic.com
games.nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
shop.nikastic.com
gigs.nikastic.com
sni216894.cloudflaressl.com
movietv.nikastic.com
travel.nikastic.com
music.nikastic.com
sni216894.cloudflaressl.com
music.nikastic.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
translation.nikastic.com
www.nikastic.com
translation.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
travel.nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
shop.nikastic.com
sni216894.cloudflaressl.com
organic.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
translation.nikastic.com
host.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
host.nikastic.com
sni216894.cloudflaressl.com
travel.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
nikastic.com
nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com
www.nikastic.com
nikastic.com
movietv.nikastic.com
sni216894.cloudflaressl.com
shop.nikastic.com
sni216894.cloudflaressl.com
btc.nikastic.com
sni216894.cloudflaressl.com
sni216894.cloudflaressl.com

Certificate

The complete raw certificate details for www.nikastic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG8DCCBdigAwIBAgIRAOqtxhhADvAfeXyCuuwOYgUwDQYJKoZIhvcNAQELBQAw
gZIxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTgwNgYD
VQQDEy9DT01PRE8gUlNBIEV4dGVuZGVkIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZl
ciBDQTAeFw0xNjAzMDMwMDAwMDBaFw0xNzAzMDMyMzU5NTlaMIHyMRAwDgYDVQQF
Ewc0NDE5MTI1MRMwEQYLKwYBBAGCNzwCAQMTAlVTMR0wGwYDVQQPExRQcml2YXRl
IE9yZ2FuaXphdGlvbjELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTEwMDE2MQswCQYD
VQQIEwJOWTERMA8GA1UEBxMITmV3IFlvcmsxITAfBgNVBAkTGDM0NyA1VEggQVZF
IFNURSAxNDAyLTEyNDEXMBUGA1UEChMOTmlrYXN0aWMsIExMQy4xFjAUBgNVBAsT
DUNPTU9ETyBFViBTU0wxGTAXBgNVBAMTEHd3dy5uaWthc3RpYy5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMKPpytg+G/pEixcWhz7tMGxd4nAo
J+B1VB08xMCoRXfncKcR6VG5ldGTGi4XxUZDonQvBPzFEdISwgamIA/97tHJDStp
24nuGeKrYgbokwl5Qt3IlmXvAvQ9rHoFrk4Zn8CafRkANDgvhKIf3mpm4r8onh6t
F9E3WFC41cqRfMhkXQquHfOc7YYLdyZM8mLZzcZcUq+ykCijDHpFf0pVu493/xJE
8ZLgUo6gOV4sIl6IGowHDS6+MNOhVCzqZA8UyJ6ZoMs8OdeyZjHd4DJPtZgTV9bc
YrDg7cBcLhJIx1IudLKxtnqJD2Nt1FvH94kxT4Xyd/xOgMQ+DhM9/Ij3AgMBAAGj
ggLdMIIC2TAfBgNVHSMEGDAWgBQ52v/KKBSKqHQTCLnkDqnS+n6daTAdBgNVHQ4E
FgQULMWTOI9cYwRMqEJJ/ahDFBqkaQEwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB
/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEYGA1UdIAQ/MD0w
OwYMKwYBBAGyMQECAQUBMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNv
bW9kby5jb20vQ1BTMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwuY29tb2Rv
Y2EuY29tL0NPTU9ET1JTQUV4dGVuZGVkVmFsaWRhdGlvblNlY3VyZVNlcnZlckNB
LmNybDCBhwYIKwYBBQUHAQEEezB5MFEGCCsGAQUFBzAChkVodHRwOi8vY3J0LmNv
bW9kb2NhLmNvbS9DT01PRE9SU0FFeHRlbmRlZFZhbGlkYXRpb25TZWN1cmVTZXJ2
ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAp
BgNVHREEIjAgghB3d3cubmlrYXN0aWMuY29tggxuaWthc3RpYy5jb20wggEDBgor
BgEEAdZ5AgQCBIH0BIHxAO8AdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7
T0/7xAAAAVM9aGThAAAEAwBHMEUCIBFSHgmXb0PY5JwtuQIzOb+E/zHFemh+QPgb
L0v8zzbLAiEAuRiRCkoHeLZ+zzL7pNKymJY1OzzA+ru7NKgp0fmAXZQAdQBWFAaa
L9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAVM9aGKOAAAEAwBGMEQCIGMr
JHdMh1s+CGQVxWs8yIAWjHGh7rOt0K/aeQ82B54wAiALVFZF3f2NYidPNDUHKi3q
PHOnwTLg9EOhWEmjFIr5sjANBgkqhkiG9w0BAQsFAAOCAQEAXGGydSnBAJNF9x9t
GOsoSdzgjA/OrsS2IOFSQMZCfvcXzZtaAZ5j0s3iARfO5XFneapOVB+H8eiZ9c4Y
6c3Ygvp+Zrzv20U5gUbvXt6mJSwwmWFFSoGfX8+lCxaCaWZJuHyX5zhQuQUuE+Id
vVxxmzXQAsEI+sguq0hQQdP2GJUQ6CWcFWXWbUa8UPLkGLyV6G9nE8owmvPKIfI8
m0TQ7M5IISktq+Dhht2UfQ35ZFELyvz1o0ZbGZ7Q2g8kQgZiynNtJIdw0nskYexb
9lPTbToIt8+MpQcxLGxLhcwmM4wCU9r/QVdB/uNKdhjNMfkPtCI+iKge8xKR7vv4
XozPMA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDCj6crYPhv6RIsXFoc+
7TBsXeJwKCfgdVQdPMTAqEV353CnEelRuZXRkxouF8VGQ6J0LwT8xRHSEsIGpiAP
/e7RyQ0raduJ7hniq2IG6JMJeULdyJZl7wL0Pax6Ba5OGZ/Amn0ZADQ4L4SiH95q
ZuK/KJ4erRfRN1hQuNXKkXzIZF0Krh3znO2GC3cmTPJi2c3GXFKvspAoowx6RX9K
VbuPd/8SRPGS4FKOoDleLCJeiBqMBw0uvjDToVQs6mQPFMiemaDLPDnXsmYx3eAy
T7WYE1fW3GKw4O3AXC4SSMdSLnSysbZ6iQ9jbdRbx/eJMU+F8nf8ToDEPg4TPfyI
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311941636208599362350914331493081702917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4419125'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10016'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '347 5TH AVE STE 1402-124'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nikastic, LLC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO EV SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nikastic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21736973873205707367029845500560848655484986802903681633333363835782483112560326748965410767334379215196043879565219640181395252078952605446443531532412572713415033998998940286105021593909434540218363049027887753836885775518832680327128536730592171409353662050260203476065012967730665722669933246959989872094856584291391758779087927751029067978237277870999751536145291695478527043116450710052497727921012642314324651622500402328173927277686960617385034781497839500369756771291924643293133431958154288145033342657660613607971489312805064330735112765764003641395762967784303738344959931198877747094730186371176993687799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 39daffca28148aa8741308b9e40ea9d2fa7e9d69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cc593388f5c63044ca84249fda843141aa46901
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikastic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001533d6864e10000040300473045022011521e09976f43d8e49c2db9023339bf84ff31c57a687e40f81b2f4bfccf36cb022100b918910a4a0778b67ecf32fba4d2b29896353b3cc0fabbbb34a829d1f9805d940075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001533d68628e00000403004630440220632b24774c875b3e086415c56b3cc880168c71a1eeb3add0afda790f36079e3002200b545645ddfd8d62274f3435072a2dea3c73a7c132e0f443a15849a3148af9b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c61b27529c1009345f71f6d18eb2849dce08c0fceaec4b620e15240c6427ef717cd9b5a019e63d2cde20117cee5716779aa4e541f87f1e899f5ce18e9cdd882fa7e66bcefdb45398146ef5edea6252c309961454a819f5fcfa50b1682696649b87c97e73850b9052e13e21dbd5c719b35d002c108fac82eab485041d3f6189510e8259c1565d66d46bc50f2e418bc95e86f6713ca309af3ca21f23c9b44d0ecce4821292dabe0e186dd947d0df964510bcafcf5a3465b199ed0da0f24420662ca736d248770d27b2461ec5bf653d36d3a08b7cf8ca507312c6c4b85cc26338c0253daff415741fee34a7618cd31f90fb4223e88a81ef31291eefbf85e8ccf30