mail2.ro72.de

- Opennet Initiative e.V. -

Issued by StartCom Class 2 Primary Intermediate Server CA

About this certificate

This digital certificate with serial number 02:6a:f5 was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Opennet Initiative e.V.

Organization: Opennet Initiative e.V.
State / Province: Mecklenburg-Vorpommern
Locality: Lalendorf
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6a:f5
Serial Number (int): 158453
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 25:7a:c4:b0:19:6b:1d:6b:b1:3f:a2:18:40:22:cb:2a:47:42:13:53
AuthorityKeyId: 11:db:23:45:fd:54:cc:6a:71:6f:84:8a:03:d7:be:f7:01:2f:26:86

Fingerprint (sha1): e7:ac:a3:5c:54:b4:f6:b5:f6:d8:ca:ca:12:67:7d:b0:92:e1:a5:24
Fingerprint (sha256): 36:bb:a9:06:a2:0b:86:96:dc:ad:54:3b:16:96:6b:27:73:1f:7d:72:4e:72:b8:df:b5:e6:11:ef:62:78:ba:f5

Issuing Certificate URL: http://aia.startssl.com/certs/sub.class2.server.ca.crt

Revocation information

OCSP Server: http://ocsp.startssl.com/sub/class2/server/ca
CRL Distribution Point: http://crl.startssl.com/crt2-crl.crl

Check the revocation status for certificate mail2.ro72.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail2.ro72.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail2.ro72.de
ro72.de

Other certificates including the domain name ro72.de

(limited to 100 certificates)
web2.ro72.de
mx.ro72.de
kerio.ro72.de
mrb.ro72.de
web2.ro72.de
ro.ro72.de
na.ro72.de
out.ro72.de
mail.ro72.de
mx.ro72.de
mail.ro72.de
out.ro72.de
edgecastcdn.net
zu.ro72.de
na.ro72.de
*.ro72.de
mrb.ro72.de
na.ro72.de
edgecastcdn.net
ro.ro72.de
web2.ro72.de
zu.ro72.de
web2.ro72.de
web2.ro72.de
out.ro72.de
out.ro72.de
mx.ro72.de
mrb.ro72.de
out.ro72.de
mail.ro72.de
out.ro72.de
mx.ro72.de
mx.ro72.de
out.ro72.de
mrb.ro72.de
ro.ro72.de
mx.ro72.de
mrb.ro72.de
edgecastcdn.net
web2.ro72.de
mx.ro72.de
edgecastcdn.net
na.ro72.de
mx.ro72.de
ro.ro72.de
out.ro72.de
mrb.ro72.de
mx.ro72.de
web2.ro72.de
mail.ro72.de
out.ro72.de
web2.ro72.de
mail.ro72.de
hh.ro72.de
web2.ro72.de
mail.ro72.de
zu.ro72.de
edgecastcdn.net
mail.ro72.de
mx.ro72.de
ibb.ro72.de
out.ro72.de
mail.ro72.de
web2.ro72.de
mail2.ro72.de
mail.ro72.de
na.ro72.de
edgecastcdn.net
na.ro72.de
out.ro72.de
mail.ro72.de
out.ro72.de
web2.ro72.de
na.ro72.de
mrb.ro72.de
mrb.ro72.de
out.ro72.de
out.ro72.de
mail.ro72.de
web2.ro72.de
edgecastcdn.net
mrb.ro72.de
mx.ro72.de
web2.ro72.de
mrb.ro72.de
mail.ro72.de
out.ro72.de
web2.ro72.de
out.ro72.de
web2.ro72.de
out.ro72.de
mx.ro72.de
mx.ro72.de
edgecastcdn.net
np.ro72.de
na.ro72.de
web2.ro72.de
mx.ro72.de
na.ro72.de
na.ro72.de

Certificate

The complete raw certificate details for mail2.ro72.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrDCCBpSgAwIBAgIDAmr1MA0GCSqGSIb3DQEBBQUAMIGMMQswCQYDVQQGEwJJ
TDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0
YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3Mg
MiBQcmltYXJ5IEludGVybWVkaWF0ZSBTZXJ2ZXIgQ0EwHhcNMTQwODI1MTIzNjEy
WhcNMTYwODI2MDc0MzU4WjCBujEZMBcGA1UEDRMQWUJLYTdXVkZ3SG0wcmo4aTEL
MAkGA1UEBhMCREUxHzAdBgNVBAgTFk1lY2tsZW5idXJnLVZvcnBvbW1lcm4xEjAQ
BgNVBAcTCUxhbGVuZG9yZjEgMB4GA1UEChMXT3Blbm5ldCBJbml0aWF0aXZlIGUu
Vi4xFjAUBgNVBAMTDW1haWwyLnJvNzIuZGUxITAfBgkqhkiG9w0BCQEWEnBvc3Rt
YXN0ZXJAcm83Mi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANtc
iB+sKyc83Yjqw6APGCfvl3Lii6xeNgCpnGf6+1E2bQykDvA5TIBWhmKN7B3LMHiG
eYzFey/ztYQ+P+V+IQRYG9kqIkq+/ClqGuqay3I3pcYKZ8P4NTZ3G9vwSIuwWyhU
tGjs2RyMPJVK/5omeKEI8sY2QI3TbDhoCGeFDc+LIvZCkc9KZEyXSBC20OzEyzT3
bJ0HNsTryEcN44sCQR15uxum+ANwUdacyoLakE9OddlAUPsVSuCF3JX3pCHTrnLs
pdzHTNa/g6ntB2qc8K4JlRLCZVWcz0cPKWvrlJwRLKSoJe2/LdIz6D0oaAMXw4pm
+p68OKsPtBD0LxQPjfzdnpu4Otx7PufwUzFk0L66P2q8H1W0pkYDl+56JuqDOLMF
G3YXeUxX4GtMOn+9imkerAE4ZOyrkXvc2hOPnHNxBgBlrMAHTPk0o2ZniOS7Ns/p
ovCWxGAHlgItgaJC9P2HFkHzjXRK1A5jT7sVi+iaQ8o6hLA8vx0TVP9y+6GVNZrU
u/sobhgtyUxsuXfGJk5Lehe2WfBeXPQgF/UdLWDTl0W4Pc/5i6o8qacR1aXyL7re
wxQenTfVw8KQtdGxjmGpK7JveESloKBM5bnUPNb9XCfj84KpPIpyCaWvI0hbVd8Q
/yyLLeYrlUt6idlkkd3dBgJkG0YkCbdTNs0PKfDhAgMBAAGjggLlMIIC4TAJBgNV
HRMEAjAAMAsGA1UdDwQEAwIDqDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwHQYDVR0OBBYEFCV6xLAZax1rsT+iGEAiyypHQhNTMB8GA1UdIwQYMBaAFBHb
I0X9VMxqcW+EigPXvvcBLyaGMCEGA1UdEQQaMBiCDW1haWwyLnJvNzIuZGWCB3Jv
NzIuZGUwggFWBgNVHSAEggFNMIIBSTAIBgZngQwBAgIwggE7BgsrBgEEAYG1NwEC
AzCCASowLgYIKwYBBQUHAgEWImh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGlj
eS5wZGYwgfcGCCsGAQUFBwICMIHqMCcWIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g
QXV0aG9yaXR5MAMCAQEagb5UaGlzIGNlcnRpZmljYXRlIHdhcyBpc3N1ZWQgYWNj
b3JkaW5nIHRvIHRoZSBDbGFzcyAyIFZhbGlkYXRpb24gcmVxdWlyZW1lbnRzIG9m
IHRoZSBTdGFydENvbSBDQSBwb2xpY3ksIHJlbGlhbmNlIG9ubHkgZm9yIHRoZSBp
bnRlbmRlZCBwdXJwb3NlIGluIGNvbXBsaWFuY2Ugb2YgdGhlIHJlbHlpbmcgcGFy
dHkgb2JsaWdhdGlvbnMuMDUGA1UdHwQuMCwwKqAooCaGJGh0dHA6Ly9jcmwuc3Rh
cnRzc2wuY29tL2NydDItY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF
BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczIvc2VydmVy
L2NhMEIGCCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9z
dWIuY2xhc3MyLnNlcnZlci5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5z
dGFydHNzbC5jb20vMA0GCSqGSIb3DQEBBQUAA4IBAQB8lnFdHviy8UdSP2sqL4Sx
3h+JX8ltWnIOWgyeTnWkkEI7mzm47pEV0zfJ6sMbo0saiyZXycCv3iOHh9KjOxgL
5D9nbW6Lxnz4kchbCQfFTYtfXmH562UUnaYIdxJugSIIwxGyMlr9HQ+XHNuJSyUj
p9RfVqTAuvpU2gMbKAPlPyc1HC1mE1IvLDHFrVd93AAEekqc0oliaZjPA7Ws7rEW
dofdU2u3YSXpkzQkx+kvimBbkakC1FzhxPntdfysG3b48mYjWtgqd9HQK3eeqsZZ
Ke5xHg/6PgZi1h+NLFwrCh5YxNWMlWtyLwCvdbFEw+dJ02DUQtOJ0J3oAzsF85uh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Digital Certificate Signing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 2 Primary Intermediate Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-25 12:36:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-26 07:43:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'YBKa7WVFwHm0rj8i'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mecklenburg-Vorpommern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lalendorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Opennet Initiative e.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail2.ro72.de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894916646743274060469861574054222257970190262456351330503352085235995027399903900651361796432794086687863746258838813052037812919126706159234956454994834720849259938702765905348568749160513226961386170884912906714392453592151456677853703987555408907147998138669665707438493323432288959511063581181584778830197171133599942929721022568028410945150684679253693755939679791017867173483275256482453540560765875612087678118540141313790278607142190277402552789050282453495254781882787689094509991806322106886159070221054925457173288390918772929844068895192402764497162664084325159048365619589363863114996066396758653830238150380660195957156852849023108972055168263050250561220227346034205491826345420873113782731059193846028950054946244098014597742319129676142187698790799535919525046777340968942738719138786963903837423324601110445584276015242242088626535928443462794128985680635867374570168172505838770216034386778884201677393008290406095930268549017246197644310170260927726070620740421829341143721442330089318586203450426844366646869495608097485853500240623842056439997248688879134526954868452584162014547381744678556398879298002893281247500348423040799202666638362123826613591709299976551984615204040085717686406216216354012274400817377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							257ac4b0196b1d6bb13fa2184022cb2a47421353
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 11db2345fd54cc6a716f848a03d7bef7012f2686
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.ro72.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro72.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (333 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'StartCom Certification Authority'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 119 97 115 32 105 115 115 117 101 100 32 97 99 99 111 114 100 105 110 103 32 116 111 32 116 104 101 32 67 108 97 115 115 32 50 32 86 97 108 105 100 97 116 105 111 110 32 114 101 113 117 105 114 101 109 101 110 116 115 32 111 102 32 116 104 101 32 83 116 97 114 116 67 111 109 32 67 65 32 112 111 108 105 99 121 44 32 114 101 108 105 97 110 99 101 32 111 110 108 121 32 102 111 114 32 116 104 101 32 105 110 116 101 110 100 101 100 32 112 117 114 112 111 115 101 32 105 110 32 99 111 109 112 108 105 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 121 105 110 103 32 112 97 114 116 121 32 111 98 108 105 103 97 116 105 111 110 115 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/crt2-crl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com/sub/class2/server/ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sub.class2.server.ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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