*.eval.janraincapture.com

Issued by PositiveSSL CA

About this certificate

This digital certificate with serial number 45:a4:da:d5:87:12:2b:e5:1e:24:94:5d:8e:27:59:56 was issued on by Comodo CA Limited.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Certificate Subject

CN=*.eval.janraincapture.com,OU=Domain Control Validated+OU=Hosted by JanRain Inc.+OU=PositiveSSL Multi-Domain

Comodo CA Limited

Organization: Comodo CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 45:a4:da:d5:87:12:2b:e5:1e:24:94:5d:8e:27:59:56
Serial Number (int): 92572706876653562842767844410036541782
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 25:6a:55:52:9c:23:d8:ba:a6:b6:f4:46:87:0f:29:a5:9f:47:90:a1
AuthorityKeyId: b8:ca:11:e9:06:31:79:db:c3:94:c6:e8:19:2a:bc:bb:35:16:31:a4

Fingerprint (sha1): cd:86:77:4a:ac:69:8b:2a:f6:7b:5f:82:e5:05:55:27:02:bd:fa:4e
Fingerprint (sha256): 3f:2f:59:57:23:8e:83:c5:d5:cc:6f:48:5d:f9:2c:c5:18:fe:9a:08:0e:42:db:fd:f2:0b:57:27:be:d6:55:e5

Issuing Certificate URL: http://crt.comodoca.com/PositiveSSLCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/PositiveSSLCA.crl
CRL Distribution Point: http://crl.comodo.net/PositiveSSLCA.crl

Check the revocation status for certificate *.eval.janraincapture.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eval.janraincapture.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eval.janraincapture.com
*.eval.janrainengage.com
*.eval.janrainsso.com
*.janraincapture.com
*.janrainengage.com
*.janrainfederate.com
*.janrainsso.com
*.test.janrainfederate.com
capture-login.trivantis.com
capture.canada.com
janraincapture.com
janrainengage.com
janrainfederate.com
janrainsso.com
profile.universalmusic.com

Other certificates including the domain name janraincapture.com

(limited to 100 certificates)
account.apple-next.com
janrain.com
*.janrain.com
janrain.biz
janrain.com
*.janraincapture.com
*.janraincapture.com
janrain.com
*.janraincapture.com
*.cc.janraincapture.com
*.janraincapture.com
rogers.client.janrain.com
*.janraincapture.com
oreilly.janrain.com
*.janraincapture.com
account.apple-next.com
slate.client.janrain.com
*.janraincapture.com
accounts.oreilly.com
*.qa.janraincapture.com
*.janraincapture.com
janrain.biz
*.multi.stg.or.janrain.com
*.janraincapture.com
*.multi.stg.or.janrain.com
uc11.janraincapture.com
*.janraincapture.com
uc11.janraincapture.com
janrain.com
*.janraincapture.com
accounts.lixil.co.jp
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
*.janraincapture.com
*.ru.janraincapture.com
*.qa.janraincapture.com
*.ru-proxy.janraincapture.com
*.testing.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.lixil.co.jp
oreilly.janrain.com
*.janraincapture.com
*.dev.janraincapture.com
*.eval.janraincapture.com
rogers.client.janrain.com
*.cn.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
janrain.biz
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
slate.client.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.oreilly.com
uc11.janraincapture.com
*.ru.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.eu.janraincapture.com
*.janraincapture.com
rogers.client.janrain.com
*.janraincapture.com
users.highpointmarket.org
oreilly.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.lixil.co.jp
*.sg.janraincapture.com
*.janraincapture.com
*.janraincapture.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
*.janraincapture.com
janrain.com
*.dev.janraincapture.com
*.qa.janraincapture.com
authenticate.globe.com.ph
janrain.com
*.janraincapture.com
authenticate.globe.com.ph
*.janraincapture.com
*.janraincapture.com
oreilly.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
oreilly.janrain.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com

Certificate

The complete raw certificate details for *.eval.janraincapture.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqXyVemhATb7TMQX632V
3Vm9s1YrChWoNPYt38tzsSoXrMfwD7fE3IBfTHy5or3Foonabc///GSAb+0CaOFc
LoPiW7A+aiNTzAoyQOqerBjaLDoqiW5LD+J7ydK8JIdHv5bnQit0t5J8b4sdlP6g
1aqzO39nR0kLNOIM7GGCgKbE2uzRxWNpqv0k9EeUlNjvm9CBtuF/mQDnevQtKr9C
YHJj9LfA2++ur3Qbe6wHio3fgmHw+7roA0jMR2XgowPjOT/Tm6qpUL9opKZiNtw3
d+fqz9s+qxCNDj0PlOgwV9+VAO0qF8xprYUi/pP4dxZztIMIyaX7Sg6AAW6IkMOE
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92572706876653562842767844410036541782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comodo CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profile.universalmusic.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'janrainsso.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'janrainfederate.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'janrainengage.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'janraincapture.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capture.canada.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capture-login.trivantis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.test.janrainfederate.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.janrainsso.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.janrainfederate.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.janrainengage.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.janraincapture.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.eval.janrainsso.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.eval.janrainengage.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.eval.janraincapture.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by JanRain Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24067109273456175690862418311038533694269211657518604917878631028056634737484945984005388318773967456028245290568303617548487884032812667193900850914978870783519076594239497082722356339774999174194097332758854702660814700485983555845647820266068955140133731666503737932964347401938814247674557311930771144537504730822261913290522804760769239618817959202742069273143739869514479647046927565248420150995259722363059170041709181132250858852795903772377871276942149312050697142521863762388600565626374912731468697091860047688121329235965949246427898806410594184935552730246344525111185293747473631574511562273723812906123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b8ca11e9063179dbc394c6e8192abcbb351631a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							256a55529c23d8baa6b6f446870f29a59f4790a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.positivessl.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/PositiveSSLCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodo.net/PositiveSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/PositiveSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (345 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eval.janraincapture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eval.janrainengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eval.janrainsso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janraincapture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainsso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capture-login.trivantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capture.canada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janraincapture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainsso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.universalmusic.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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