naturalmotion.com

- NaturalMotion Ltd. -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number 46:e0:46:a9:a3:2a:6b:c9:11:5b:80:88:06:90:2e:60 was issued on by COMODO CA Limited.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames should not contain a bare IANA suffix. (BRs: 1.6.1, Base Domain Name)
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • 2 DNS name(s) are bare public suffixes: exchange, oxexc1 The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NaturalMotion Ltd.

Organization: NaturalMotion Ltd.
Organization unit: Unified Communications
Address: Walton Well Road,
Address: Eagle House,
Postal code: OX2 6ED
State / Province: Oxfordshire
Locality: Oxford
Country: GB

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 46:e0:46:a9:a3:2a:6b:c9:11:5b:80:88:06:90:2e:60
Serial Number (int): 94210467409984973507223076152261226080
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ad:06:48:dd:20:8d:46:d4:8e:99:26:9b:5b:83:a0:c0:97:c4:39:b4
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): c4:82:45:07:9f:d5:c0:63:c7:68:0d:ba:91:0c:81:ff:30:e9:f9:5d
Fingerprint (sha256): 45:72:3a:96:da:91:84:50:99:b5:ff:0a:5b:67:82:b7:6c:7f:12:b7:9f:04:1c:a1:31:92:7b:f4:4c:39:6b:db

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate naturalmotion.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naturalmotion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naturalmotion.com
autodiscover.naturalmotion.com
autodiscover.nm.local
exchange
exchange.nm.local
mail1.naturalmotion.com
mail2.naturalmotion.com
mailtest.naturalmotion.com
oxexc1
oxexc1.nm.local
webmail.naturalmotion.com

Other certificates including the domain name naturalmotion.com

(limited to 100 certificates)
ssl277858.cloudflaressl.com
accessallareas.naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
files.naturalmotion.com
naturalmotion.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
jira.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
exchange.naturalmotion.com
jira.naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
accessallareas.naturalmotion.com
ssl277856.cloudflaressl.com
naturalmotion.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
testrail.naturalmotion.com
testrail.naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
naturalmotion.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
naturalmotion.com
accessallareas.naturalmotion.com
ssl277858.cloudflaressl.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
docs.naturalmotion.com
fb.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl277858.cloudflaressl.com
support.naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
accessallareas.naturalmotion.com
*.naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391882.cloudflaressl.com
accessallareas.naturalmotion.com

Certificate

The complete raw certificate details for naturalmotion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgIQRuBGqaMqa8kRW4CIBpAuYDANBgkqhkiG9w0BAQUFADCB
iTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxLzAtBgNV
BAMTJkNPTU9ETyBIaWdoLUFzc3VyYW5jZSBTZWN1cmUgU2VydmVyIENBMB4XDTEy
MTIwNTAwMDAwMFoXDTE0MTIwNTIzNTk1OVowgdMxCzAJBgNVBAYTAkdCMRAwDgYD
VQQREwdPWDIgNkVEMRQwEgYDVQQIEwtPeGZvcmRzaGlyZTEPMA0GA1UEBxMGT3hm
b3JkMRowGAYDVQQJExFXYWx0b24gV2VsbCBSb2FkLDEVMBMGA1UECRMMRWFnbGUg
SG91c2UsMRswGQYDVQQKExJOYXR1cmFsTW90aW9uIEx0ZC4xHzAdBgNVBAsTFlVu
aWZpZWQgQ29tbXVuaWNhdGlvbnMxGjAYBgNVBAMTEW5hdHVyYWxtb3Rpb24uY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUvcVnUs8rl2VEG4j2h2
U5+fgF/XAmlFywnM0MS3qcF27E+2X3eY7qo6Kod+6qUChmvl//NU6B+7yp/MaUlb
tpnAy7L+StYl+uLfj0wty3kiadI3I3yn8MAcQvyITOPYWu6PUb/jeJtZhOiPwYrq
kMcbEcz97wqq38JpMz2Ux9FyxKLD1wmCAFxzSj8/zDKaq1Hl4fh65JKflSxzzj1i
63i/5OiSS1FGgC4JMV4j1Ci8y+tUM+szoJqSdrUHhp4rJIYQzyOkFepe1dP9pRI9
ZMT5R88QYWSpT4XtIGrvA7Z8I1LmPXGFGJu+fIncnESOGlsFkJSa05OiGFd3fsI3
sQIDAQABo4ICnjCCApowHwYDVR0jBBgwFoAUP9W10NZEeVBKF6ObjErcuLAiZGsw
HQYDVR0OBBYEFK0GSN0gjUbUjpkmm1uDoMCXxDm0MA4GA1UdDwEB/wQEAwIFoDAM
BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBQBgNV
HSAESTBHMDsGDCsGAQQBsjEBAgEDBDArMCkGCCsGAQUFBwIBFh1odHRwczovL3Nl
Y3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgIwTwYDVR0fBEgwRjBEoEKgQIY+
aHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPSGlnaC1Bc3N1cmFuY2VTZWN1
cmVTZXJ2ZXJDQS5jcmwwgYAGCCsGAQUFBwEBBHQwcjBKBggrBgEFBQcwAoY+aHR0
cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPSGlnaC1Bc3N1cmFuY2VTZWN1cmVT
ZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNv
bTCB9AYDVR0RBIHsMIHpghFuYXR1cmFsbW90aW9uLmNvbYIeYXV0b2Rpc2NvdmVy
Lm5hdHVyYWxtb3Rpb24uY29tghVhdXRvZGlzY292ZXIubm0ubG9jYWyCCGV4Y2hh
bmdlghFleGNoYW5nZS5ubS5sb2NhbIIXbWFpbDEubmF0dXJhbG1vdGlvbi5jb22C
F21haWwyLm5hdHVyYWxtb3Rpb24uY29tghptYWlsdGVzdC5uYXR1cmFsbW90aW9u
LmNvbYIGb3hleGMxgg9veGV4YzEubm0ubG9jYWyCGXdlYm1haWwubmF0dXJhbG1v
dGlvbi5jb20wDQYJKoZIhvcNAQEFBQADggEBAJcnuOcOrB3DHvngjJ2Ke3ABC/a/
FReqPXHaf1hy8m1w3tFwyOAqb9+QD7LaLPtrSorfBfyUsC1rYbyUzAZGKlLU+Ylm
CxI4Y1x5ZdD2UzxX1Gb/UOQjl63z79T4xyn8WPq8j2kTN8utafDhygzbzufF4xGQ
EsMzb0d4SHxpMmvR5xQO9OLI5ZUqMu1no75AGLj8RYYM8TP/Xsad/2cM/qAXHTJj
chr1LZYfmkcNqnhMyFdEk9dVGoYEwm0AUZeO1gxxiDkUpDxKPX4/e7bKa/ZHi07/
qJ+pbzk8b2Wzd8Zcva3UbIKTPAPz37KcMP8ik0m9nQ3aG9cH+ikPNCys0QY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUvcVnUs8rl2VEG4j2h2
U5+fgF/XAmlFywnM0MS3qcF27E+2X3eY7qo6Kod+6qUChmvl//NU6B+7yp/MaUlb
tpnAy7L+StYl+uLfj0wty3kiadI3I3yn8MAcQvyITOPYWu6PUb/jeJtZhOiPwYrq
kMcbEcz97wqq38JpMz2Ux9FyxKLD1wmCAFxzSj8/zDKaq1Hl4fh65JKflSxzzj1i
63i/5OiSS1FGgC4JMV4j1Ci8y+tUM+szoJqSdrUHhp4rJIYQzyOkFepe1dP9pRI9
ZMT5R88QYWSpT4XtIGrvA7Z8I1LmPXGFGJu+fIncnESOGlsFkJSa05OiGFd3fsI3
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94210467409984973507223076152261226080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OX2 6ED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oxfordshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oxford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walton Well Road,'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eagle House,'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NaturalMotion Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturalmotion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25916260820598324775592662590491726013084112478531498862459869149010362730103293649393635139031160514815363587473450076855377430767194590149841369402000685695776317906681177465664027129034327910729093329952362741192743193524862491317863255012131134096593704150446825183712860399720070048295760042168210646294678824745032679122478371097016904940961554011493486562405611322602184925411852540832996063661161996020767219390320929901556994133372249039213731361340855995815598563734712236473873426619674413098016169586731441258469433059018293272520694027881598188225597322341918849930335625544056347301554122078202707982257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad0648dd208d46d48e99269b5b83a0c097c439b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (236 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nm.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.nm.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailtest.naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxexc1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxexc1.nm.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.naturalmotion.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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