oimsoa11g-stg.ets.org

- Educational Testing Service -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 16:43:4f:ce:9c:95:dd:28:d0:e4:cf:98:47:d6:d9:76 was issued on by COMODO CA Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Educational Testing Service

Organization: Educational Testing Service
Organization unit: Non-Production-LB
Organization unit: Hosted by Educational Testing Service
Organization unit: Unified Communications
Address: 660 Rosedale Road
Postal code: 08541
State / Province: New Jersey
Locality: Princeton
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 16:43:4f:ce:9c:95:dd:28:d0:e4:cf:98:47:d6:d9:76
Serial Number (int): 29592518476610984950579606398728329590
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ca:c9:76:70:e2:7f:06:5a:0a:89:3a:8b:cd:99:57:09:78:24:2c:2f
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 62:42:fa:fd:9a:2b:69:0c:c2:4d:24:5b:db:24:1f:52:c2:4f:1b:5c
Fingerprint (sha256): 47:d8:b8:d0:17:3d:bb:cc:4d:13:33:29:17:4d:1d:13:53:f3:cc:7a:d9:de:5c:a6:e5:0a:d2:3d:4b:63:10:05

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate oimsoa11g-stg.ets.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oimsoa11g-stg.ets.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oimsoa11g-stg.ets.org
oimsoa-stg.ets.org
oimsoa-stg.etslan.org

Other certificates including the domain name ets.org

(limited to 100 certificates)
ibt2-cloud-util-test-prod.ets.org
isbd-cdn-test.ets.org
nlp-pilot.ets.org
elpac-help-preview.ets.org
ibt2tc-ts.ets.org
elpac-help-qc.ets.org
cahsee1.ets.org
ibtint-prod.ets.org
one-uat-batchservices-a.ets.org
v2.ereg.ets.org
ibis-ess-perf.ets.org
ereg.ets.org
stnmanager-uat.ets.org
isbd-matchmakerphp-dev.ets.org
ndecore.ets.org
cdd-dev-cft.ets.org
erater-new-test.ets.org
sparkle-0-8-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
www.ets.org
ereg-ext.ets.org
rm.ets.org
eregweb-uat-ext.ets.org
cdd-test.ets.org
criterion28.ets.org
isr-stage.ets.org
eiassoaresponse-dvi.ets.org
erater-new-stage.ets.org
ibtprod-central.ets.org
facets-test.ets.org
fed11g-stg.ets.org
portal-stage.ets.org
cars-dev.ets.org
esc-dev-rest.ets.org
grediagnostic-dev.ets.org
etslnbz28.ets.org
skw.ets.org
hiset.more.ets.org
toeicrts.ets.org
conda.nlplab-dev.c.ets.org
isr.ets.org
TOEFL-REGISTRATION.ETS.ORG
one-web-a.ets.org
toefl-registration-dev.ets.org
osnlbpi4.ets.org
hostedzone-demo.etstest-innovate001.c-test.ets.org
isbd-cdn-stage.ets.org
api.parcore-dev.ets.org
api.ibis-test.ets.org
rpm-ot.ets.org
store.ets.org
origin-cinnamon.m.ets-plalab-ghe-nonprod.c.ets.org
san.ets.org
etsvln160.etslan.org
mmai-conf-mmai-tst-dev.ets-mmai-nonprod.c.ets.org
ensr-web.ets.org
gatewaycps-stg.ets.org
www.ets.org
nlpservices-stage.ets.org
ensr-ssrs-web-60.ets.org
one-uat-web-a.ets.org
usndcssl3.ets.org
*.ets.org
v2-scoreload.ereg.ets.org
*.ets.org
texasassessment.ets.org
api.mmai-ccs-stg.ets-plalab-nonprod.c.ets.org
toefl.ereg.ets.org
gace-qc.ets.org
cert-1201-1.etstest-innovate001.c-test.ets.org
rptasys-stg.ets.org
*.ets.org
docs.ets-adatalake-nonprod.c.ets.org
title2.ets.org
sparkle-0-5-2-prod-elb-tfd.ets-lltalab-swc-prod.c.ets.org
sparklite.jr.ets-plalab-ghe-nonprod.c.ets.org
fed11g-stg.ets.org
cbmtd.ets.org
ibt2-speedtest.ets.org
san.ets.org
eias11g-stg.ets.org
authnsvcps3-tst.ets.org
isbd-portal-stage.ets.org
api.mmai-102531.ets-mmai-nonprod.c.ets.org
ssrs.ets.org
san.ets.org
vpn.ets.org
tcmservices-dev.ets.org
ibt2-cloud-util.ets.org
san.ets.org
api.parcore-test.ets.org
practice-new.ets.org
gace.more.ets.org
www.ets.org
stnres-int.ets.org
ibtsb.ets.org
conda.nlplab-dev.c.ets.org
origin-criterionng-stage.ets.org
mmai-nvf-mmai-tst-272250.ets-mmai-nonprod.c.ets.org
osn-wspx1.ets.org
api.mmai-102397.ets-mmai-nonprod.c.ets.org

Certificate

The complete raw certificate details for oimsoa11g-stg.ets.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNkttLx1yPPxDuGHsthd
lI82r6a8ZVgv+TXm9CkOrNBOP8ueg23k3uNZsvpyj4BfPsKXBQX6XiaLiAB/wKMU
QBHaQNAmC/iInfS7PFZIKhCb/GoAH0lP47kFlaBOWRIl7lqebu/hVqVL5e4bKK8E
r2Jvghl4FGs3RZoF1f6s9VYncjmEdOk45sQXvPdJHB4u5iMo9GRRBSbHGN0zfQ/e
aNLmlRoyBaJ5L1x5yn9ms1Jcl06uhEkw5sgp79k2Vixs4lRZVP2AngOMa1dI1Ba8
VmlrAzUAYlFlw+v7Fba9CxSxeX/CgdivhoDbF2Ss0ECnVCJ3Wr97mK4Vx7X0Dg+g
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29592518476610984950579606398728329590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08541'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '660 Rosedale Road'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Non-Production-LB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oimsoa11g-stg.ets.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23839896062707250507366374067892257549113683200170670282163477011828072521976286826449851162346748238120537341037434079871083909476301448087931019807768875443609276406198243890046544263333878872679054869228284646330964757566963451007552845170392143106700101652997200261647028080043999049158013225715185125057075440195644157512381323360425819420520906956072077155956175090982317902252017120752158071439991746219667092903469713711931053868160774953872635895950780252365470995612450763161425339849200871487147296072261673590516367500477236938207835082297107664843195852214560340960221180104466869982056603461595199152131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cac97670e27f065a0a893a8bcd99570978242c2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oimsoa11g-stg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oimsoa-stg.ets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oimsoa-stg.etslan.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a15d42759b69733c9c81b3d72753d0eef48bdc17df747d28a025cd2715aed8304436466b781e5e215c597e42edccf5da79610097458157a811d0f997486f4e7538e53ee9f4b2837fef856543db5fd6a9b0b7b0c6dae62ac94f2f243be1477fa917cd787098207782edfb04e252fbd374a2d7bfe2b76e05d36bb5fa1135961970bc47a50d4c685506fbd8c697c7405bded27d156a25217feefda999bc4d50275335731d35f541ab242e65abfdaf2607ae246456d9d6f23e1a589a8caa04af3efab507975b99cb338c2144447fc698cd6f2f6e4ed40539dc7a0d53e2a38a885b76b56671f230bf3146ea68b23893f156c2330e3f3491c3ddf4085eb85cdc9ff54a