git.spica.bz

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 8b:e2:50:58:ae:84:f9:2e:92:4a:72:a4:ab:bd:27:87 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.spica.bz,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8b:e2:50:58:ae:84:f9:2e:92:4a:72:a4:ab:bd:27:87
Serial Number (int): 185937780122989917412021696432208422791
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 40:45:6f:77:b5:fe:7c:f5:d7:e0:82:d7:57:c6:00:f3:29:d9:81:14
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 6c:8b:3a:2f:2f:9f:cc:f3:c1:4b:e3:a7:56:e9:67:3d:f5:a8:53:1b
Fingerprint (sha256): 38:40:fc:e9:b2:71:78:38:13:b2:ba:16:0b:09:e3:48:da:4a:34:8d:e3:18:e7:ee:21:d5:d7:73:af:05:86:0e

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate git.spica.bz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.spica.bz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.spica.bz
www.git.spica.bz

Other certificates including the domain name spica.bz

(limited to 100 certificates)
timrly.com
sni146386.cloudflaressl.com
www.youtubecommentsdownloader.com
sni146386.cloudflaressl.com
hv.com.ua
bortronx.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
energiebeheerders.nl
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
ctf.spica.bz
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
pro.spica.bz
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
ctf.spica.bz
inquiryai.com
sni146386.cloudflaressl.com
console.riskut.com
git.spica.bz
howard-edwards.rocks
shaula.spica.bz
mexicantraindominoes.com
sni146386.cloudflaressl.com
staging.sysi.or.th
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
triathlogs.com
app.schauaufsland.at
*.spica.bz
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
spica.bz
sni146386.cloudflaressl.com
sandbox.spica.bz
*.spica.bz
sh.spica.bz
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
vendo-staff.touchtech.com
flexiecms.ml
songbook.ukelerele.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
luhijumobi.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
staging.sysi.or.th
sni146386.cloudflaressl.com
md.spica.bz
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
www.titan2u.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
cdc.order.place
shaula.spica.bz
spica.bz
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
healthcare.gothor.com
git.spica.bz
jameslester.com
sanjayasubedi.com.np
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
www.farmaciamaia.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
www.compartilhevida.com.br
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
ctf.spica.bz
sni146386.cloudflaressl.com
beta.provi.com.br
sni146386.cloudflaressl.com
sni146386.cloudflaressl.com
payment.douzo.me
sni146386.cloudflaressl.com
*.spica.bz
sni146386.cloudflaressl.com

Certificate

The complete raw certificate details for git.spica.bz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIRAIviUFiuhPkukkpypKu9J4cwDQYJKoZIhvcNAQELBQAw
gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMTUwNjA4MDAwMDAwWhcNMTYwNjA3MjM1OTU5WjBQMSEwHwYDVQQLExhE
b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMRUw
EwYDVQQDEwxnaXQuc3BpY2EuYnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQ7pehv0TX0q0Sj7ljSGVNZSR6l2NgawlnWirZQUNeabFtqXtVww15Kux/
qWfUwtaB3eizYRuZlVRT7I/J7+cpMeAcJz89a4WyWj1ANxP25+eLn3dMTv64wssS
AS2cQ4LJPvlgiYngy3nHOgW6vPhbgs+uEOqs804Dg/A3LR5YoGFwz9Hu3UidEzKj
+bGwpcXBcHcbHqravxAHw6QIkNQ79lHab0RiQdrW1hoTj/2VV1jnB3T1WdtL8TEo
cOBr1klVoUEC3e2FUPbYBoxGNCzgebSApZO/Va0hUFJqEP7/x67zQN7vCVGWq478
5yT9kijvLfUEW74bHaXzk43sW4npAgMBAAGjggHbMIIB1zAfBgNVHSMEGDAWgBSQ
r2o6lFoL2JDqElZz30O0Oija5zAdBgNVHQ4EFgQUQEVvd7X+fPXX4ILXV8YA8ynZ
gRQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYLKwYBBAGyMQECAgcwKzApBggr
BgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLmNvbS9DUFMwCAYGZ4EMAQIB
MFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9E
T1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYUGCCsGAQUF
BwEBBHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09N
T0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMCkGA1UdEQQiMCCCDGdpdC5z
cGljYS5ieoIQd3d3LmdpdC5zcGljYS5iejANBgkqhkiG9w0BAQsFAAOCAQEAVUsF
Rmr1wnMPWFCI8QTfbFypoQ5HnSwbQDYXNjWWB665hQhpiQfaaHUchY2auEokCxJV
CZg2sG6kEsfVMu11X7uqnR/LM4/vG3mygE/6KWhNC8SQIQ7ugdz9cvpvvz4gliG9
gLKGAZyCXNK2JvDR/rekq+5sddytxKgzCagiEbirrnRBdeRuukF1pnEg/yFYOxcm
aSRYBb+sk8yT45NDWYRdtwSw12be+A1mbDk97bj3dbT9Z2LPvhRVxGjSxq3CV16l
eXno7IeRiKPwYZO24eI95WUGicsVNlZCKTy5Z8TmX+fVBsVV0TNGxvMlpIGHy1f8
qWwjwki7U0Ohko8mMg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O6Xob9E19KtEo+5Y0hl
TWUkepdjYGsJZ1oq2UFDXmmxbal7VcMNeSrsf6ln1MLWgd3os2EbmZVUU+yPye/n
KTHgHCc/PWuFslo9QDcT9ufni593TE7+uMLLEgEtnEOCyT75YImJ4Mt5xzoFurz4
W4LPrhDqrPNOA4PwNy0eWKBhcM/R7t1InRMyo/mxsKXFwXB3Gx6q2r8QB8OkCJDU
O/ZR2m9EYkHa1tYaE4/9lVdY5wd09VnbS/ExKHDga9ZJVaFBAt3thVD22AaMRjQs
4Hm0gKWTv1WtIVBSahD+/8eu80De7wlRlquO/Ock/ZIo7y31BFu+Gx2l85ON7FuJ
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185937780122989917412021696432208422791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.spica.bz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26375221686930541019977582637148426627227568181977205102542814488036702859913194233070032560717681149486721489359095851484697916167789906366734943117390927828682723035280708316815123636067219306074431485529956893567845115039016426588473323090867701642297026586338687033880967632364612404979204073408091319545369364485981826785341056353624164732196618958255463193364390927225426559487819801964853007273958055744706641273552624124323203914387372569128672331963132522230359003802810145814824869526093854946373202501130377557372766684392016799682199320420904932237244234818430781238577355710389663626626731256391105481193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40456f77b5fe7cf5d7e082d757c600f329d98114
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.spica.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.git.spica.bz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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