mail.ciff.org

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 08:c7:b8:45:a5:ad:86:4e:a2:a1:87:56:ae:90:2b:c6 was issued on by COMODO CA Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.ciff.org,OU=Domain Control Validated+OU=Hosted by Star Technology Services Limited+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 08:c7:b8:45:a5:ad:86:4e:a2:a1:87:56:ae:90:2b:c6
Serial Number (int): 11670828522512848107894131480903822278
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1d:12:57:fe:59:3e:88:74:be:d9:76:21:cd:e9:1d:b1:c8:f9:dc:a4
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): f2:81:b7:93:8a:10:c4:4e:a7:f5:f2:ed:fb:4c:5f:88:cc:51:c4:3e
Fingerprint (sha256): 3f:01:61:9f:b2:6d:4c:94:ab:7b:65:e9:f6:06:7f:63:75:28:82:92:c8:05:1a:d8:b0:03:41:25:2a:90:3e:91

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate mail.ciff.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ciff.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.ciff.org
autodiscover.ciff.org
autodiscover.ciffconsultants.org
autodiscover.cleanairfund.org
autodiscover.shedecides.com
s22482-001-mb01.ciff.org

Other certificates including the domain name ciff.org

(limited to 100 certificates)
acme.svc.torchbox.net
helpdesk.unitedwarehouse.com
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
help.seoudisupermarket.com
support.homeownersfg.com
acme.svc.torchbox.net
ciff.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.gortons.com
iot-helpdesk.dtgo.com
iot-helpdesk.dtgo.com
servicedesk.simkosupport.com
acme.svc.torchbox.net
servicedesk.primowater.com
acme.svc.torchbox.net
support.blaney.com
careers.ciff.org
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
supportdesk.highmarkfcu.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
helpdesk.nwtc.edu
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
destek.4usbilisim.com
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
helpdesk.abxpackaging.com
helpdesk.boire.qc.ca
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
careers.ciff.org
acme.svc.torchbox.net
acme.svc.torchbox.net
supportdesk.highmarkfcu.com
helpdesk.boire.qc.ca
destek.4usbilisim.com
acme.svc.torchbox.net
servicedesk.simkosupport.com
acme.svc.torchbox.net
helpdesk.unitedwarehouse.com
helpdesk.unitedwarehouse.com
ciff.org
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.mastercall.org.uk
acme.svc.torchbox.net
servicedesk.primowater.com
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
dev.ciff.org
servicedesk.simkosupport.com
servicedesk.mastercall.org.uk
kcsthelps.kcst.edu.kw
support.studio22.tv
ithelpdesk.ciff.org
helpdesk.vielis.co.jp
itsupport.integrationcharterschools.org
mail.ciff.org
servicedesk.mastercall.org.uk
sd.21tk.ru
ciff.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
dev.ciff.org
itsp.tv2east.dk
support.blaney.com
helpdesk.abxpackaging.com
destek.4usbilisim.com
servicedesk.mastercall.org.uk
*.ciff.org
supportservices.mitwpu.edu.in
servicedesk.mastercall.org.uk
helpdesk.abxpackaging.com
impact.ciff.org
acme.svc.torchbox.net
helpdesk.jdanetwork.com
helpdesk.tamiser.in
acme.svc.torchbox.net
support.blaney.com
servicedesk.mastercall.org.uk
servicedesk.deepbluecompany.com.au
helpdesk.jdanetwork.com
acme.svc.torchbox.net
servicedesk.mastercall.org.uk

Certificate

The complete raw certificate details for mail.ciff.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIQCMe4RaWthk6ioYdWrpArxjANBgkqhkiG9w0BAQsFADCB
kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV
BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0xODA1MDEwMDAwMDBaFw0xOTA4MjMyMzU5NTlaMIGcMSEwHwYDVQQLExhE
b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxMzAxBgNVBAsTKkhvc3RlZCBieSBTdGFy
IFRlY2hub2xvZ3kgU2VydmljZXMgTGltaXRlZDEqMCgGA1UECxMhQ09NT0RPIFNT
TCBVbmlmaWVkIENvbW11bmljYXRpb25zMRYwFAYDVQQDEw1tYWlsLmNpZmYub3Jn
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M4S9ovVstrYG8Po4gRl
TNt0YTXzumqva2qjD5Oupy/JaJy6PdJP0wgWf0i6S9cMxUJxMUUexDvw9KoRQ+S1
S6ELDxJt3SoH0RmegU6PEGCvqO5UAXSWL6I5l4UNnG889ZNPWtZSOjd/1eeE6iTs
MjYiHGJBQ5TFoI0uYG/Qx3f0NjHrcH5QsR8cvTrTyh6Eyu5w23xjSwt1xKZO052F
aFET9Bq0oqbyonrwuVLe5U3iymjrTQ14HLQlQgvx1NeWLnxK/AHEyNUOZYpcT3M1
4WFUT6UIlMXW9455MDxn9BMDaKm3/21vW72xADcKZSi1UE6zlIEPN57g/EypHah/
qQIDAQABo4ID3jCCA9owHwYDVR0jBBgwFoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucw
HQYDVR0OBBYEFB0SV/5ZPoh0vtl2Ic3pHbHI+dykMA4GA1UdDwEB/wQEAwIFoDAM
BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNV
HSAESDBGMDoGCysGAQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2Vj
dXJlLmNvbW9kby5jb20vQ1BTMAgGBmeBDAECATBUBgNVHR8ETTBLMEmgR6BFhkNo
dHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9u
U2VjdXJlU2VydmVyQ0EuY3JsMIGFBggrBgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKG
Q2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRp
b25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNv
bW9kb2NhLmNvbTCBqQYDVR0RBIGhMIGegg1tYWlsLmNpZmYub3JnghVhdXRvZGlz
Y292ZXIuY2lmZi5vcmeCIGF1dG9kaXNjb3Zlci5jaWZmY29uc3VsdGFudHMub3Jn
gh1hdXRvZGlzY292ZXIuY2xlYW5haXJmdW5kLm9yZ4IbYXV0b2Rpc2NvdmVyLnNo
ZWRlY2lkZXMuY29tghhzMjI0ODItMDAxLW1iMDEuY2lmZi5vcmcwggF+BgorBgEE
AdZ5AgQCBIIBbgSCAWoBaAB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6
qP3LAAABYxx8qZ0AAAQDAEcwRQIgB3FZ3EADnezFxnaNtl2wEkgab2EkbORtcUgv
x2XUuwcCIQDw2uuZYEKuwICma4c9RwMg55NGBpcKisLNw2i7btZ4KAB2AHR+2oMx
rTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABYxx8qecAAAQDAEcwRQIgBwk0
U1scjUw6dtpy+AuDptCU3ocC27IM2ORrX1/ZqyICIQCQBpGLbWHQfcHwe346dA8p
oO803MD9Gy0XOE1HIOfvagB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H
E9MMAAABYxx8qb0AAAQDAEcwRQIgJmeLK2IHNJwspOwQSPRgisC14c/DNXJzgpAG
vzzRMrsCIQC2OaylGEuoCb81wlQICwkw4dtqgqT+u9BClHViBau+nDANBgkqhkiG
9w0BAQsFAAOCAQEAOIaWJXAPCJCP/73MkvWUyZXKEG+oyYSzNfELhAAkcANO0XSp
OXyW+UTOPSvgTJqwZ9LBi0qPBecnVHdhNOpX8wFNipX0rINZK9Id3hXp2aWPq+hi
FxeBYwoz99ZXgo4VOszFATE5EAZKrRBuPA6w6eZmXQoF4+g60z/fu2wtqlA+h1+Z
UNBbuuvOvP/1xKflF5zMKURjYV7YW32TFGY8SpMNsden50kQXTwWGMlFW/UQ1a3t
ZsflUGkp/2JdPn002i6BFrnEdD16eVqbdz9RglYelN7RQKcBTEV0kkas2Z+jxORi
eHd5wKUtl3RJ4H01hSMfLpmVfrE6mlTfILK0tg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M4S9ovVstrYG8Po4gRl
TNt0YTXzumqva2qjD5Oupy/JaJy6PdJP0wgWf0i6S9cMxUJxMUUexDvw9KoRQ+S1
S6ELDxJt3SoH0RmegU6PEGCvqO5UAXSWL6I5l4UNnG889ZNPWtZSOjd/1eeE6iTs
MjYiHGJBQ5TFoI0uYG/Qx3f0NjHrcH5QsR8cvTrTyh6Eyu5w23xjSwt1xKZO052F
aFET9Bq0oqbyonrwuVLe5U3iymjrTQ14HLQlQgvx1NeWLnxK/AHEyNUOZYpcT3M1
4WFUT6UIlMXW9455MDxn9BMDaKm3/21vW72xADcKZSi1UE6zlIEPN57g/EypHah/
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11670828522512848107894131480903822278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Star Technology Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ciff.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29388905665648800690676577484743265418756894808285965375534214044035619014699189339130461857441946795031548817779965011807173643265597320134165576708766757431710390487070050628280118522418736096754051597456829290393262743969477753434117130977008493629937880985151874112599014512881666216014919919936989687164995339914850995972793812746067214283204666100133936550971637539685386059564395013041764887091990085510850186033000784008758546186698449945751418603450383301726280265022396390831800436976323832683321243647600581700437452305625469043777879988111913613101709047976107785999441348199622418980330163845781567078313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:29|false] CHARACTER STRING [87 254 89 62 136 116 190 217 118 33 205 233 29 177 200 249 220 164]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ciff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ciff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ciffconsultants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cleanairfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.shedecides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's22482-001-mb01.ciff.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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