www.citynet.net

- Citynet, LLC -

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 24:11:db:cd:09:9a:79:49 was issued on by Starfield Technologies, Inc..

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Citynet, LLC

Company registration number: 199962
Organization: Citynet, LLC
State / Province: West Virginia
Locality: Bridgeport
Country: US

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:11:db:cd:09:9a:79:49
Serial Number (int): 2599100133645384009
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: c4:d8:2d:fd:5a:b1:9f:48:27:59:45:9a:75:8c:e7:37:db:3c:89:61
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 73:b1:61:cc:e3:cf:5f:1a:9f:39:1f:d5:48:c8:15:34:fe:ae:04:e2
Fingerprint (sha256): 43:1d:06:d9:84:63:32:6e:42:4b:8a:49:25:47:2c:5f:88:8d:72:30:95:72:08:45:65:f0:4f:62:92:0e:d1:0c

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s3-1.crl

Check the revocation status for certificate www.citynet.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.citynet.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.citynet.net
citynet.net
phoneadmin.citynet.net
conf.citynet.net
webmail.citynet.net
voice.citynet.net
tv.citynet.net
myaccount.citynet.net
im.citynet.net
ams2.citynet.net
ams1.citynet.net

Other certificates including the domain name citynet.net

(limited to 100 certificates)
excas.citynet.net
webtools.citynet.net
www.citynet.net
securehosting.citynet.net
www.citynet.net
secure.citynet.net
www.citynet.net
stream.citynet.net
retailstatus.sts.pl
www.citynet.net
status.sirocco.global
cucm-pub01-ms.admin.citynet.net
www.citynet.net
excas.citynet.net
www.citynet.net
sni.cloudflaressl.com
www.citynet.net
*.citynet.net
itraxx.citynet.net
www.citynet.net
cms.citynet.net
cms.citynet.net
status.meshcaid.com
excas.citynet.net
sni.cloudflaressl.com
*.citynet.net
status.sirocco.global
intranet.citynet.net
www.citynet.net
status.sirocco.global
status.sirocco.global
ce.citynet.net
webtools.citynet.net
www.citynet.net
tlspeering.citynet.net
www.citynet.net
status.meshcaid.com
www.citynet.net
vcloud.citynet.net
*.citynet.net
www.citynet.net
livegrades.citynet.net
secure.citynet.net
www.citynet.net
securehosting.citynet.net
excas.citynet.net
excas.citynet.net
www.citynet.net
livegrades.citynet.net
www.citynet.net
secure.citynet.net
securehosting.citynet.net
netpulse.citynet.net
www.citynet.net
www.citynet.net
status.sirocco.global
www.citynet.net
livegrades.citynet.net
excas.citynet.net
www.citynet.net
gateway.citynet.net
accounts.citynet.net
status.citynet.net
sni.cloudflaressl.com
retailstatus.sts.pl
secure.citynet.net
*.citynet.net
*.citynet.net
stream.citynet.net
www.citynet.net
securehosting.citynet.net
status.sirocco.global
statuspage.onmex.mx
excas.citynet.net
ce.citynet.net
itraxx.citynet.net
status.sirocco.global
excas.citynet.net
excas.citynet.net
www.citynet.net
status.sirocco.global
*.citynet.net
status.meshcaid.com
*.citynet.net
sni.cloudflaressl.com
status.sirocco.global
excas.citynet.net
www.citynet.net
*.citynet.net
www.citynet.net
excas.citynet.net
status.meshcaid.com
statuspage.onmex.mx
*.citynet.net
www.citynet.net
www.citynet.net
excas.citynet.net
www.citynet.net
status.citynet.net
status.sirocco.global

Certificate

The complete raw certificate details for www.citynet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+rmE7E/q5KgQKA3SVjq
ztZ6EWbByU0BJH76+fVg6aWnpIrvBVasHWoVBnT6LWwHq868gP1oObNytWykPT0r
6YLK3iDEoNenRl5Lyo1kFl+fO4yuTjfJjIiVp0YlC2QONcoVJjDfI+NcFLdB4SDI
MwIUfB6bfDA4Gz6FzWi466WhDdpYTzR3zfxFlBwjAZ0hJaYQEcyx7PlzfSNY7xUY
mU5wW968VRodETLPvLQkec2sj8I6WQPLHByYHuwYsmqDbFLbYum9/B+aBlFOf6IJ
6m6UmpMm+VZClPJu6aMxINNK/7PZ3qyEVvUszjYcCK3sOMU/scM0FQnYsAnOidqw
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2599100133645384009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 15:14:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-17 15:14:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '199962'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bridgeport'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Citynet, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.citynet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25742208792959484890558490435358273133377355485458186915968663482769608741669732254294372520192652768506085480070899804582893709832593585019493350448875977333944593717303280108473948786694020682554311669315377765497439581606384234927457367981300381903151108032758805749580465867992682526851610067392928789254861683043052290693300429072896130655468423118672222536145729077015470929738400398600947762304292173924942113398428020687174549079863115167484981673756816105778273617542391054427950926699190052507573223636695771572539349058762230968626111051520320401629571227037800022116369064684657579071811617822820510904531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s3-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.3 (Starfield EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneadmin.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voice.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams2.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams1.citynet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4d82dfd5ab19f482759459a758ce737db3c8961
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ddbe47d78f3b8ae29c7ed0ab0648a5371db0c1e5909e3ec05b2d1e71ca5e36813b283562b02709ee8e12a2a4613403d4fb79734f884861baa3f4ec01c70dc032d2ee0f61695d02e4262a1d61ef57052bac7688099fb690363c2ad448a2a3c00b76f26e6702866a718f790ecf092645affc48d1511fa6ec08e199e65c7b9dacee0f2e0e5852b4b2546bb9c0b04980e47c7d4f7668673ab5cadfb74054394a3587105e98a2a6380200f8bd866176ab3ff06bebe1a9c2152853b2793e90f5f0fe4b80e668f80cb6b6c19599d117fd8d94bbf8105a138361abf520cc21b3b9b8a55718db6a25aee087dff70d5c946bd5425aa4e972592d31d2e675302306b40c2b28