mail.eliteservice.no
- Elite Service Partner AS -
Issued by StartCom Class 3 OV Server CA
About this certificate
This digital certificate with serial number 1d:91:db:70:1e:b0:09:da:6e:cf:62:d8:2b:83:4a:05 was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Elite Service Partner AS
Organization:
Elite Service Partner AS
State / Province:
Oppland
Locality: Høvik
Country: NO
Locality: Høvik
Country: NO
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 1d:91:db:70:1e:b0:09:da:6e:cf:62:d8:2b:83:4a:05Serial Number (int): 39304945653004879403341771677735537157
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 71:19:ee:b9:a0:89:44:0d:ea:c4:5d:26:3e:62:33:95:e3:b6:22:89
AuthorityKeyId: b1:3f:1c:92:7b:92:b0:5a:25:b3:38:fb:9c:07:a4:26:50:32:e3:51
Fingerprint (sha1): e9:95:27:7a:24:00:0c:38:f5:a7:8a:78:35:d8:f4:f9:ca:e8:d8:bf
Fingerprint (sha256): 47:f3:0c:7e:56:ed:29:d8:29:e4:bf:ae:42:fe:b4:6d:a3:01:33:89:3e:84:48:4f:f5:5e:ef:c9:36:3e:c0:a1
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server3.crl
Check the revocation status for certificate mail.eliteservice.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.eliteservice.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.eliteservice.no
eliteservice.no
eliteservice.no
Other certificates including the domain name eliteservice.no
(limited to 100 certificates)
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
eliteservice.no
eliteservice.no
eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
eliteservice.no
eliteservice.no
administrasjon.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
eliteservice.no
eliteservice.no
eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
eliteservice.no
eliteservice.no
administrasjon.eliteservice.no
crm.eliteservice.no
mail.eliteservice.no
crm.eliteservice.no
crm.eliteservice.no
Certificate
The complete raw certificate details for mail.eliteservice.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIQHZHbcB6wCdpuz2LYK4NKBTANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDMgT1YgU2VydmVyIENBMB4XDTE2MDMzMDA2MDUyMloXDTE5MDMz MDA2MDUyMlowcjELMAkGA1UEBhMCTk8xEDAOBgNVBAgMB09wcGxhbmQxDzANBgNV BAcMBkjDuHZpazEhMB8GA1UECgwYRWxpdGUgU2VydmljZSBQYXJ0bmVyIEFTMR0w GwYDVQQDDBRtYWlsLmVsaXRlc2VydmljZS5ubzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJuVMRVV5sNqLaf8HqbEg57RsvQb++WYs2AINyaUQb+/oeOt RkGeWgsuXZBzSocvhJDXmmk6+R2bbL+Mo4dnFJrT3ZAYbYq9q4Ifpw1FTneUSKwW o8cWADwr6FardQH48xh2iW2QmWDJsbipNM9q9VAIwQsvmnPeXGejTbmLvuS5IA8c MpDCuwIARACO8D7zIf+PS4ZC/xvN5TKPnGKZZL7LTIv2jKWjKuijw2kQAnmy4l2f Y2CdmXr8eJ6CLPzZXwbe05ETAyjy6EHoupycBq6PqTrwBKVubpF2xH1T5XjywVuh cDiZlZOQQILS8SgXUhjyNhph0SsbC7KntwRIZ0cCAwEAAaOCAecwggHjMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwCQYDVR0T BAIwADAdBgNVHQ4EFgQUcRnuuaCJRA3qxF0mPmIzleO2IokwHwYDVR0jBBgwFoAU sT8cknuSsFolszj7nAekJlAy41EwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9h aWEuc3RhcnRzc2wuY29tL2NlcnRzL3NjYS5zZXJ2ZXIzLmNydDA4BgNVHR8EMTAv MC2gK6AphidodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zY2Etc2VydmVyMy5jcmww MAYDVR0RBCkwJ4IUbWFpbC5lbGl0ZXNlcnZpY2Uubm+CD2VsaXRlc2VydmljZS5u bzAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wUAYDVR0gBEkw RzAIBgZngQwBAgIwOwYLKwYBBAGBtTcBAgUwLDAqBggrBgEFBQcCARYeaHR0cDov L3d3dy5zdGFydHNzbC5jb20vcG9saWN5MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQAirbWSkz96bOhqMQQdbnvCQvph3tYkffN8PuDeDeZK ggRFIzbUM9PFp6C8rfXvwq8U8POZaomzRztKSlU6ghoC9pX8+aMHaKLw/kzt8GvA ARLr2NHv54+57aW5DZ3uuocL+4bx78O+1hb3ARBOYGJ8H/P0HD//QmFKw8xDJ7Oy Vmz/DGudw7Go9v2o7wMag0q296ko6kIkp2NF6PZxlJ5CuaVJ7YN67uFMV95GC9wI hy8adVECUKrL+jIyR8uPZljXVkiyO69CVaRAUGG7744B8jnysY1O8Pguudk9L3jH FFhZL+n5NIKMNVHDsRR9qTRQPyJhA4HAQ0arpqzTJHXi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5UxFVXmw2otp/wepsSD ntGy9Bv75ZizYAg3JpRBv7+h461GQZ5aCy5dkHNKhy+EkNeaaTr5HZtsv4yjh2cU mtPdkBhtir2rgh+nDUVOd5RIrBajxxYAPCvoVqt1AfjzGHaJbZCZYMmxuKk0z2r1 UAjBCy+ac95cZ6NNuYu+5LkgDxwykMK7AgBEAI7wPvMh/49LhkL/G83lMo+cYplk vstMi/aMpaMq6KPDaRACebLiXZ9jYJ2Zevx4noIs/NlfBt7TkRMDKPLoQei6nJwG ro+pOvAEpW5ukXbEfVPlePLBW6FwOJmVk5BAgtLxKBdSGPI2GmHRKxsLsqe3BEhn RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 39304945653004879403341771677735537157 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-30 06:05:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-30 06:05:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oppland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Høvik' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Elite Service Partner AS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.eliteservice.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19640506454653052761926164189513432500230331091411355272611082476432903222418004834319943613600639666821856811397053828395931051332707027604663612913599680428077146640024969659604108521432556179683927238848683700894945958092496582440757269388750923773487301047054662618574329620872096214642652354867001186727209657637295662957058252885080959354665825877249985215580778052080035621163001081039494293233072791534104865477435915785393249554468688355637146736275220096489823414199689546098305801475988098229469964770568442991492126415229419900914628208180728334648544750355437019868507213237516655430085818231344891193159 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7119eeb9a089440deac45d263e623395e3b62289 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b13f1c927b92b05a25b338fb9c07a4265032e351 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.eliteservice.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliteservice.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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