*.hemlock.com

- Hemlock Printers Ltd. -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number a9:23:04:b9:7f:0c:67:6b:87:58:be:3f:7e:97:87:41 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Hemlock Printers Ltd.

Organization: Hemlock Printers Ltd.
Organization unit: PremiumSSL Wildcard
Address: 7050 Buller Avenue
Postal code: V5J 4S3
State / Province: BC
Locality: Burnaby
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a9:23:04:b9:7f:0c:67:6b:87:58:be:3f:7e:97:87:41
Serial Number (int): 224821357503867572977774416065046480705
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6d:05:eb:bd:58:9f:08:a8:50:4d:8e:15:b1:45:3f:2b:bd:ba:56:a6
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): 8a:5c:77:cb:a1:98:ad:9c:9d:4d:7a:1e:2c:2c:f5:f0:b3:f9:a9:e7
Fingerprint (sha256): 35:ba:c5:e0:b4:00:2a:2e:af:b9:55:cf:63:04:93:00:b6:e7:3e:7a:bf:21:ea:48:e3:50:73:8e:f7:50:f7:61

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate *.hemlock.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hemlock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hemlock.com
hemlock.com

Other certificates including the domain name hemlock.com

(limited to 100 certificates)
support.poorstudio.co
forescout.inflowtechnologies.in
support.supermpower.com
www.laws.my
helpdesk.lamundial.com
support.supermpower.com
hemlock.com
help.uafrica.com
portal.simforcanada.com
support.nextconnex.com
help.dakcs.com
support.qed.co.uk
support.shopwithgama.ga
help.ahaslides.com
support.supermpower.com
support.haratech.co.id
support.carpay.com
help.trustmedis.com
agents.northstartravelco.com
help.dakcs.com
em3.netrio.com
accounting.rahisystems.com
support.supermpower.com
ohs.hemlock.com
support.supermpower.com
support.ifwerp.com
help.mexico.resistancemusic.com
support.ayalawestgrove.net
agents.northstartravelco.com
agents.northstartravelco.com
sst-support.transact.com
direct.hemlock.com
help.onlyfanstrafficsource.com
support.maxwalkerwilliams.co.uk
support.supermpower.com
support.doodlelabs.com
hemlock.com
support.wpcloudsolutions.com
support.mydesignlist.com
direct.hemlock.com
support.mydesignlist.com
suporte.mindify.net
support.supermpower.com
support.supermpower.com
rdc.ingresso.com
support.meetaide.com
support.nextconnex.com
agents.northstartravelco.com
support.carpay.com
help.dakcs.com
support.wide.com.sa
support.borealdesign.com
support.qed.co.uk
clubsupport.ghanaweb.com
*.hemlock.com
support.supermpower.com
support.supermpower.com
support.labmoneta.com
sos.123assist.me
support.supermpower.com
direct.hemlock.com
support.supermpower.com
support.qed.co.uk
support.supermpower.com
portal.ibizarentals.be
forescout.inflowtechnologies.in
ayudamu.mensajerosurbanos.com
supporthr.hireresolve.us
help.bettermlo.com
suporte.mindify.net
help.dakcs.com
support.supermpower.com
support.supermpower.com
qpsupport.hemlock.com
support.poorstudio.co
direct.hemlock.com
qpsupport.hemlock.com
sac.wxeq.com.br
support.wpcloudsolutions.com
servicedesk.aegis.law
agents.northstartravelco.com
support.supermpower.com
soporte.prepa-in.com
soporte.prepa-in.com
hemlock.com
support.poorstudio.co
support.supermpower.com
hemlock.com
*.hemlock.com
support.supermpower.com
agents.northstartravelco.com
support.supermpower.com
support.supermpower.com
avservice.conticorporation.com
*.hemlock.com
ohs.hemlock.com
support.poorstudio.co
help.dakcs.com
suporte.jumba.com.br
helpdesk.abra.io

Certificate

The complete raw certificate details for *.hemlock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIRAKkjBLl/DGdrh1i+P36Xh0EwDQYJKoZIhvcNAQEFBQAw
gYkxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMS8wLQYD
VQQDEyZDT01PRE8gSGlnaC1Bc3N1cmFuY2UgU2VjdXJlIFNlcnZlciBDQTAeFw0x
MTEwMTkwMDAwMDBaFw0xNDEwMTgyMzU5NTlaMIGxMQswCQYDVQQGEwJDQTEQMA4G
A1UEERMHVjVKIDRTMzELMAkGA1UECBMCQkMxEDAOBgNVBAcTB0J1cm5hYnkxGzAZ
BgNVBAkTEjcwNTAgQnVsbGVyIEF2ZW51ZTEeMBwGA1UEChMVSGVtbG9jayBQcmlu
dGVycyBMdGQuMRwwGgYDVQQLExNQcmVtaXVtU1NMIFdpbGRjYXJkMRYwFAYDVQQD
FA0qLmhlbWxvY2suY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
6Zdp//boOrzZ5n0yGW4PKhnzL1AZaVlr4oGL2L4cYO5EndaPsVfkEdNLCGdg5zE3
Vertv84uREwM/nWhwHYZRCg9GKMHsQqXkPSBPBmijczPCmlLg502hooYcKv7pp3u
dkFkEwzTGKld7LzvI14CsqVTTWBx0QuUUnhIMo5VecliZ0kOQEq0nhT8ZbNXTbHR
6rEg3x3kqeletVW9DNGSx+77hCbdfM0PNc3V1KH1X4r+BJEVfpcciY7Ge0F+Kvp/
Lpu8FJ5KCZy1vWFXUSWLrLSK2/EqaFMlIkR2PgmSE68FsBeA8yLeOCitpTe5AwpB
qvU6UX9D1sN898RiN17JpQIDAQABo4IBxDCCAcAwHwYDVR0jBBgwFoAUP9W10NZE
eVBKF6ObjErcuLAiZGswHQYDVR0OBBYEFG0F671YnwioUE2OFbFFPyu9ulamMA4G
A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEDBDArMCkGCCsGAQUF
BwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzBPBgNVHR8ESDBGMESg
QqBAhj5odHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9IaWdoLUFzc3VyYW5j
ZVNlY3VyZVNlcnZlckNBLmNybDCBgAYIKwYBBQUHAQEEdDByMEoGCCsGAQUFBzAC
hj5odHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9IaWdoLUFzc3VyYW5jZVNl
Y3VyZVNlcnZlckNBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2Rv
Y2EuY29tMCUGA1UdEQQeMByCDSouaGVtbG9jay5jb22CC2hlbWxvY2suY29tMA0G
CSqGSIb3DQEBBQUAA4IBAQCVbmLLgNaOS8QTytZhb62zLLam7OiM7Of/GTHs1xKB
6hKWU2TG3CvWJeMUrU4IH1R+ClbD3DKAf3ueSr71WzSpSGQrjet4E4ikqgbC6dSH
oJjV0OCzwsccYL+Bs2xSuqRqe7dD89w8zWmstr+A1YltWtkz3FLHWEc4KDf7RM41
nJ6HKamTYxT67Ywp7fDy+te/A21B4CEXAhXQF7wNSUYmT4T4DNwl5gn3LCXDcyP4
yLk022LI31G9aosMmWcO1fhIpY56BKq3NxvahnMUbciP8gT343Ynv1TkQU337bFy
DiOkEKhLpxu2TdX8xVirYCS/6DZjS/S58a7Zcxbb7UCn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zdp//boOrzZ5n0yGW4P
KhnzL1AZaVlr4oGL2L4cYO5EndaPsVfkEdNLCGdg5zE3Vertv84uREwM/nWhwHYZ
RCg9GKMHsQqXkPSBPBmijczPCmlLg502hooYcKv7pp3udkFkEwzTGKld7LzvI14C
sqVTTWBx0QuUUnhIMo5VecliZ0kOQEq0nhT8ZbNXTbHR6rEg3x3kqeletVW9DNGS
x+77hCbdfM0PNc3V1KH1X4r+BJEVfpcciY7Ge0F+Kvp/Lpu8FJ5KCZy1vWFXUSWL
rLSK2/EqaFMlIkR2PgmSE68FsBeA8yLeOCitpTe5AwpBqvU6UX9D1sN898RiN17J
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 224821357503867572977774416065046480705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'V5J 4S3'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burnaby'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7050 Buller Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hemlock Printers Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PremiumSSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.hemlock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29488190113847935117628443790175799886585666012311936532101328653246247276083186841347102038052352644235406717127067740598199571883712024711732383251597579800946925786796990777717165848537520703931221229840556542118488500959256003973547183804707508152892274335623022710529736172378730344088401851185514523119736134359455548116492509339530195113132899815962006350142971849153146709144141136305849227850389684397381770892424473114475489576138328299062519095953995470607117894295102453296709247664821803156224260244904519493081287683219299678069943883757195816508394774449988087602321436061711163183781401928104599800229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d05ebbd589f08a8504d8e15b1453f2bbdba56a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hemlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemlock.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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