mail.ciff.org
Issued by COMODO RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 08:c7:b8:45:a5:ad:86:4e:a2:a1:87:56:ae:90:2b:c6 was issued on by COMODO CA Limited.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.ciff.org,OU=Domain Control Validated+OU=Hosted by Star Technology Services Limited+OU=COMODO SSL Unified Communications
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 08:c7:b8:45:a5:ad:86:4e:a2:a1:87:56:ae:90:2b:c6Serial Number (int): 11670828522512848107894131480903822278
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 1d:12:57:fe:59:3e:88:74:be:d9:76:21:cd:e9:1d:b1:c8:f9:dc:a4
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7
Fingerprint (sha1): f2:81:b7:93:8a:10:c4:4e:a7:f5:f2:ed:fb:4c:5f:88:cc:51:c4:3e
Fingerprint (sha256): 3f:01:61:9f:b2:6d:4c:94:ab:7b:65:e9:f6:06:7f:63:75:28:82:92:c8:05:1a:d8:b0:03:41:25:2a:90:3e:91
Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
Check the revocation status for certificate mail.ciff.org
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.ciff.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.ciff.org
autodiscover.ciff.org
autodiscover.ciffconsultants.org
autodiscover.cleanairfund.org
autodiscover.shedecides.com
s22482-001-mb01.ciff.org
autodiscover.ciff.org
autodiscover.ciffconsultants.org
autodiscover.cleanairfund.org
autodiscover.shedecides.com
s22482-001-mb01.ciff.org
Other certificates including the domain name ciff.org
(limited to 100 certificates)
acme.svc.torchbox.net
helpdesk.unitedwarehouse.com
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
help.seoudisupermarket.com
support.homeownersfg.com
acme.svc.torchbox.net
ciff.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.gortons.com
iot-helpdesk.dtgo.com
iot-helpdesk.dtgo.com
servicedesk.simkosupport.com
acme.svc.torchbox.net
servicedesk.primowater.com
acme.svc.torchbox.net
support.blaney.com
careers.ciff.org
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
supportdesk.highmarkfcu.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
helpdesk.nwtc.edu
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
destek.4usbilisim.com
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
helpdesk.abxpackaging.com
helpdesk.boire.qc.ca
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
careers.ciff.org
acme.svc.torchbox.net
acme.svc.torchbox.net
supportdesk.highmarkfcu.com
helpdesk.boire.qc.ca
destek.4usbilisim.com
acme.svc.torchbox.net
servicedesk.simkosupport.com
acme.svc.torchbox.net
helpdesk.unitedwarehouse.com
helpdesk.unitedwarehouse.com
ciff.org
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.primowater.com
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
dev.ciff.org
servicedesk.simkosupport.com
servicedesk.mastercall.org.uk
kcsthelps.kcst.edu.kw
support.studio22.tv
ithelpdesk.ciff.org
helpdesk.vielis.co.jp
itsupport.integrationcharterschools.org
mail.ciff.org
servicedesk.mastercall.org.uk
sd.21tk.ru
ciff.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
dev.ciff.org
itsp.tv2east.dk
support.blaney.com
helpdesk.abxpackaging.com
destek.4usbilisim.com
servicedesk.mastercall.org.uk
*.ciff.org
supportservices.mitwpu.edu.in
servicedesk.mastercall.org.uk
helpdesk.abxpackaging.com
impact.ciff.org
acme.svc.torchbox.net
helpdesk.jdanetwork.com
helpdesk.tamiser.in
acme.svc.torchbox.net
support.blaney.com
servicedesk.mastercall.org.uk
servicedesk.deepbluecompany.com.au
helpdesk.jdanetwork.com
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
helpdesk.unitedwarehouse.com
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
help.seoudisupermarket.com
support.homeownersfg.com
acme.svc.torchbox.net
ciff.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.gortons.com
iot-helpdesk.dtgo.com
iot-helpdesk.dtgo.com
servicedesk.simkosupport.com
acme.svc.torchbox.net
servicedesk.primowater.com
acme.svc.torchbox.net
support.blaney.com
careers.ciff.org
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
supportdesk.highmarkfcu.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
helpdesk.nwtc.edu
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
destek.4usbilisim.com
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
helpdesk.abxpackaging.com
helpdesk.boire.qc.ca
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
careers.ciff.org
acme.svc.torchbox.net
acme.svc.torchbox.net
supportdesk.highmarkfcu.com
helpdesk.boire.qc.ca
destek.4usbilisim.com
acme.svc.torchbox.net
servicedesk.simkosupport.com
acme.svc.torchbox.net
helpdesk.unitedwarehouse.com
helpdesk.unitedwarehouse.com
ciff.org
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.primowater.com
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
dev.ciff.org
servicedesk.simkosupport.com
servicedesk.mastercall.org.uk
kcsthelps.kcst.edu.kw
support.studio22.tv
ithelpdesk.ciff.org
helpdesk.vielis.co.jp
itsupport.integrationcharterschools.org
mail.ciff.org
servicedesk.mastercall.org.uk
sd.21tk.ru
ciff.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
dev.ciff.org
itsp.tv2east.dk
support.blaney.com
helpdesk.abxpackaging.com
destek.4usbilisim.com
servicedesk.mastercall.org.uk
*.ciff.org
supportservices.mitwpu.edu.in
servicedesk.mastercall.org.uk
helpdesk.abxpackaging.com
impact.ciff.org
acme.svc.torchbox.net
helpdesk.jdanetwork.com
helpdesk.tamiser.in
acme.svc.torchbox.net
support.blaney.com
servicedesk.mastercall.org.uk
servicedesk.deepbluecompany.com.au
helpdesk.jdanetwork.com
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
Certificate
The complete raw certificate details for mail.ciff.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmDCCBoCgAwIBAgIQCMe4RaWthk6ioYdWrpArxjANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xODA1MDEwMDAwMDBaFw0xOTA4MjMyMzU5NTlaMIGcMSEwHwYDVQQLExhE b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxMzAxBgNVBAsTKkhvc3RlZCBieSBTdGFy IFRlY2hub2xvZ3kgU2VydmljZXMgTGltaXRlZDEqMCgGA1UECxMhQ09NT0RPIFNT TCBVbmlmaWVkIENvbW11bmljYXRpb25zMRYwFAYDVQQDEw1tYWlsLmNpZmYub3Jn MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M4S9ovVstrYG8Po4gRl TNt0YTXzumqva2qjD5Oupy/JaJy6PdJP0wgWf0i6S9cMxUJxMUUexDvw9KoRQ+S1 S6ELDxJt3SoH0RmegU6PEGCvqO5UAXSWL6I5l4UNnG889ZNPWtZSOjd/1eeE6iTs MjYiHGJBQ5TFoI0uYG/Qx3f0NjHrcH5QsR8cvTrTyh6Eyu5w23xjSwt1xKZO052F aFET9Bq0oqbyonrwuVLe5U3iymjrTQ14HLQlQgvx1NeWLnxK/AHEyNUOZYpcT3M1 4WFUT6UIlMXW9455MDxn9BMDaKm3/21vW72xADcKZSi1UE6zlIEPN57g/EypHah/ qQIDAQABo4ID3jCCA9owHwYDVR0jBBgwFoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucw HQYDVR0OBBYEFB0SV/5ZPoh0vtl2Ic3pHbHI+dykMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNV HSAESDBGMDoGCysGAQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2Vj dXJlLmNvbW9kby5jb20vQ1BTMAgGBmeBDAECATBUBgNVHR8ETTBLMEmgR6BFhkNo dHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9u U2VjdXJlU2VydmVyQ0EuY3JsMIGFBggrBgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKG Q2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRp b25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNv bW9kb2NhLmNvbTCBqQYDVR0RBIGhMIGegg1tYWlsLmNpZmYub3JnghVhdXRvZGlz Y292ZXIuY2lmZi5vcmeCIGF1dG9kaXNjb3Zlci5jaWZmY29uc3VsdGFudHMub3Jn gh1hdXRvZGlzY292ZXIuY2xlYW5haXJmdW5kLm9yZ4IbYXV0b2Rpc2NvdmVyLnNo ZWRlY2lkZXMuY29tghhzMjI0ODItMDAxLW1iMDEuY2lmZi5vcmcwggF+BgorBgEE AdZ5AgQCBIIBbgSCAWoBaAB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6 qP3LAAABYxx8qZ0AAAQDAEcwRQIgB3FZ3EADnezFxnaNtl2wEkgab2EkbORtcUgv x2XUuwcCIQDw2uuZYEKuwICma4c9RwMg55NGBpcKisLNw2i7btZ4KAB2AHR+2oMx rTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABYxx8qecAAAQDAEcwRQIgBwk0 U1scjUw6dtpy+AuDptCU3ocC27IM2ORrX1/ZqyICIQCQBpGLbWHQfcHwe346dA8p oO803MD9Gy0XOE1HIOfvagB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H E9MMAAABYxx8qb0AAAQDAEcwRQIgJmeLK2IHNJwspOwQSPRgisC14c/DNXJzgpAG vzzRMrsCIQC2OaylGEuoCb81wlQICwkw4dtqgqT+u9BClHViBau+nDANBgkqhkiG 9w0BAQsFAAOCAQEAOIaWJXAPCJCP/73MkvWUyZXKEG+oyYSzNfELhAAkcANO0XSp OXyW+UTOPSvgTJqwZ9LBi0qPBecnVHdhNOpX8wFNipX0rINZK9Id3hXp2aWPq+hi FxeBYwoz99ZXgo4VOszFATE5EAZKrRBuPA6w6eZmXQoF4+g60z/fu2wtqlA+h1+Z UNBbuuvOvP/1xKflF5zMKURjYV7YW32TFGY8SpMNsden50kQXTwWGMlFW/UQ1a3t ZsflUGkp/2JdPn002i6BFrnEdD16eVqbdz9RglYelN7RQKcBTEV0kkas2Z+jxORi eHd5wKUtl3RJ4H01hSMfLpmVfrE6mlTfILK0tg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M4S9ovVstrYG8Po4gRl TNt0YTXzumqva2qjD5Oupy/JaJy6PdJP0wgWf0i6S9cMxUJxMUUexDvw9KoRQ+S1 S6ELDxJt3SoH0RmegU6PEGCvqO5UAXSWL6I5l4UNnG889ZNPWtZSOjd/1eeE6iTs MjYiHGJBQ5TFoI0uYG/Qx3f0NjHrcH5QsR8cvTrTyh6Eyu5w23xjSwt1xKZO052F aFET9Bq0oqbyonrwuVLe5U3iymjrTQ14HLQlQgvx1NeWLnxK/AHEyNUOZYpcT3M1 4WFUT6UIlMXW9455MDxn9BMDaKm3/21vW72xADcKZSi1UE6zlIEPN57g/EypHah/ qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11670828522512848107894131480903822278 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Star Technology Services Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ciff.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29388905665648800690676577484743265418756894808285965375534214044035619014699189339130461857441946795031548817779965011807173643265597320134165576708766757431710390487070050628280118522418736096754051597456829290393262743969477753434117130977008493629937880985151874112599014512881666216014919919936989687164995339914850995972793812746067214283204666100133936550971637539685386059564395013041764887091990085510850186033000784008758546186698449945751418603450383301726280265022396390831800436976323832683321243647600581700437452305625469043777879988111913613101709047976107785999441348199622418980330163845781567078313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:29|false] CHARACTER STRING [87 254 89 62 136 116 190 217 118 33 205 233 29 177 200 249 220 164] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ciff.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ciff.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ciffconsultants.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cleanairfund.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.shedecides.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's22482-001-mb01.ciff.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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