3cx.okam.ch
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 42:d2:e9:7a:3b:f4:93:7d:68:95:e0:dc:91:79:d2:82 was issued on by SSL Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=3cx.okam.ch
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 42:d2:e9:7a:3b:f4:93:7d:68:95:e0:dc:91:79:d2:82Serial Number (int): 88824165547925528973798132743893799554
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 66:8c:61:c0:5e:cb:c0:9e:8d:2d:ba:37:e7:84:76:82:01:80:91:f6
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): b8:93:41:8d:ce:cd:18:05:52:00:20:b6:af:bc:ac:57:a9:ce:f9:f9
Fingerprint (sha256): 4f:59:6b:cc:00:07:41:cb:88:14:ae:85:aa:0a:d1:3d:29:0a:e8:a3:83:01:c5:72:7c:56:aa:8f:d2:96:10:53
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate 3cx.okam.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 3cx.okam.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3cx.okam.ch
www.3cx.okam.ch
www.3cx.okam.ch
Other certificates including the domain name okam.ch
(limited to 100 certificates)
assistance.essentielweb.com
assist.voramedic.de
assist.werbas.com
assist.diavicom.com
okam.ch
assist.mgi.digital
assist.littleit.net
assist.mgi.digital
assist.oneeightyone.com
assist.oneeightyone.com
help.mensinga.it
helpdesk.ictzaak.nl
okam.ch
assist.abctelephonie.com
assist.werbas.com
assist.oneeightyone.com
assist.voramedic.de
support.exsto.be
assist.oneeightyone.com
mx1.os.okam.ch
assistenza.dieffesistemi.it
help.mensinga.it
assist.oneeightyone.com
assist.baeumlin-management.ch
asistencia.tuchoconsultoria.com
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.diavicom.com
okam.ch
assist.bool.ie
okam.ch
portal.visionsoft.com.cy
assist.oneeightyone.com
mx1.os.okam.ch
asistencia.okadrive.com
assist.okam.ch
support.exsto.be
assistance.essentielweb.com
help.mensinga.it
asistencia.tuchoconsultoria.com
3cx.okam.ch
support.citylegalservices.co.uk
okam.ch
assist.voramedic.de
join.byzz.plus
assist.sladetech.co.uk
hilfe.skycom.gmbh
asistencia.tuchoconsultoria.com
assist.oneeightyone.com
assist.oneeightyone.com
support.zero2hero.community
okam.ch
assist.mgi.digital
assist.nichecrm.builders
assist.voramedic.de
assist.okam.ch
support.citylegalservices.co.uk
support.citylegalservices.co.uk
assist.sladetech.co.uk
assistenza.lrsa.it
*.okam.ch
assist.baeumlin-management.ch
help.mensinga.it
join.byzz.plus
asistencia.tuchoconsultoria.com
assist.baeumlin-management.ch
assist.sladetech.co.uk
support.ukictltd.com
assist.abctelephonie.com
okam.ch
assist.oneeightyone.com
assist.oneeightyone.com
assist.nichecrm.builders
assist.mgi.digital
assist.oneeightyone.com
join.byzz.plus
assistenza.dieffesistemi.it
support.citylegalservices.co.uk
helpdesk.evalink.io
assist.baeumlin-management.ch
assist.sladetech.co.uk
helpdesk.ictzaak.nl
hilfe.skycom.gmbh
support.ukictltd.com
assistance.essentielweb.com
assist.oneeightyone.com
assist.bool.ie
assist.nichecrm.builders
helpdesk.ictzaak.nl
support.ukictltd.com
assist.abctelephonie.com
support.exsto.be
assistenza.dieffesistemi.it
assist.oneeightyone.com
assist.okam.ch
assist.werbas.com
assist.oneeightyone.com
support.exsto.be
assist.oneeightyone.com
assist.voramedic.de
assist.werbas.com
assist.diavicom.com
okam.ch
assist.mgi.digital
assist.littleit.net
assist.mgi.digital
assist.oneeightyone.com
assist.oneeightyone.com
help.mensinga.it
helpdesk.ictzaak.nl
okam.ch
assist.abctelephonie.com
assist.werbas.com
assist.oneeightyone.com
assist.voramedic.de
support.exsto.be
assist.oneeightyone.com
mx1.os.okam.ch
assistenza.dieffesistemi.it
help.mensinga.it
assist.oneeightyone.com
assist.baeumlin-management.ch
asistencia.tuchoconsultoria.com
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.diavicom.com
okam.ch
assist.bool.ie
okam.ch
portal.visionsoft.com.cy
assist.oneeightyone.com
mx1.os.okam.ch
asistencia.okadrive.com
assist.okam.ch
support.exsto.be
assistance.essentielweb.com
help.mensinga.it
asistencia.tuchoconsultoria.com
3cx.okam.ch
support.citylegalservices.co.uk
okam.ch
assist.voramedic.de
join.byzz.plus
assist.sladetech.co.uk
hilfe.skycom.gmbh
asistencia.tuchoconsultoria.com
assist.oneeightyone.com
assist.oneeightyone.com
support.zero2hero.community
okam.ch
assist.mgi.digital
assist.nichecrm.builders
assist.voramedic.de
assist.okam.ch
support.citylegalservices.co.uk
support.citylegalservices.co.uk
assist.sladetech.co.uk
assistenza.lrsa.it
*.okam.ch
assist.baeumlin-management.ch
help.mensinga.it
join.byzz.plus
asistencia.tuchoconsultoria.com
assist.baeumlin-management.ch
assist.sladetech.co.uk
support.ukictltd.com
assist.abctelephonie.com
okam.ch
assist.oneeightyone.com
assist.oneeightyone.com
assist.nichecrm.builders
assist.mgi.digital
assist.oneeightyone.com
join.byzz.plus
assistenza.dieffesistemi.it
support.citylegalservices.co.uk
helpdesk.evalink.io
assist.baeumlin-management.ch
assist.sladetech.co.uk
helpdesk.ictzaak.nl
hilfe.skycom.gmbh
support.ukictltd.com
assistance.essentielweb.com
assist.oneeightyone.com
assist.bool.ie
assist.nichecrm.builders
helpdesk.ictzaak.nl
support.ukictltd.com
assist.abctelephonie.com
support.exsto.be
assistenza.dieffesistemi.it
assist.oneeightyone.com
assist.okam.ch
assist.werbas.com
assist.oneeightyone.com
support.exsto.be
assist.oneeightyone.com
Certificate
The complete raw certificate details for 3cx.okam.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqjCCA5KgAwIBAgIQQtLpejv0k31oleDckXnSgjANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTI0MDQxMzE1NTg0M1oXDTI1MDQxNTE1NTg0M1owFjEUMBIG A1UEAwwLM2N4Lm9rYW0uY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcuGr1g1JI4iP7C2g9fiMrQGRXL5kuIceWRZh4Mao2LhjbpTCOPv88Y7mksy1V BoOBzliLg1X9m08SpfYielrbVi1ox2YotR4G9yOxeNjXQ3RFsUllXTJV/nNh1qvm NAjNbOTpIc7OywSY+Szc1TXxgvika7jF5YHbWMwMgfujgLC17cLh+FWHxw8eVcgy ngATv1rcnqCmp1YqPpQVsg7v7HkrhQJxmOChx3ejg+tDaWBhJlrUAPlONtrSpsj6 37JAQXhaXFtHNpwORBKgrk4T3bbUEkw4ZIJgaBC3KSr7Zy6rWTDGQH07/gBxsZ5j fd37neiWpMVys1v5jAZSr5SJAgMBAAGjggGfMIIBmzAMBgNVHRMBAf8EAjAAMB8G A1UdIwQYMBaAFCYUfuDc16b34tQEJ99h8cLs5zLKMHIGCCsGAQUFBwEBBGYwZDBA BggrBgEFBQcwAoY0aHR0cDovL2NlcnQuc3NsLmNvbS9TU0xjb20tU3ViQ0EtU1NM LVJTQS00MDk2LVIxLmNlcjAgBggrBgEFBQcwAYYUaHR0cDovL29jc3BzLnNzbC5j b20wJwYDVR0RBCAwHoILM2N4Lm9rYW0uY2iCD3d3dy4zY3gub2thbS5jaDAjBgNV HSAEHDAaMAgGBmeBDAECATAOBgwrBgEEAYKpMAEDAQEwHQYDVR0lBBYwFAYIKwYB BQUHAwIGCCsGAQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmxzLnNz bC5jb20vU1NMY29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwHQYDVR0OBBYE FGaMYcBey8CejS26N+eEdoIBgJH2MA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAdKyeVGkMHEuWHLJ6Gkh1tdbW jBq3jblpRJ5HzSPb81ge3TNU5psyidehck3lfkZaT2eCVOm+3I4JW67+NldD8PW8 JmCsjTxJ7ylwug2vc+2JuoUCJcrLveAzyfNpj3gjHIYuikykLbtjueHZNA2V0fCa rXmFZzkHE8nKHtkoCpttFW9p4n7iMzFFG7+6AA5vbnMLIb7/MOBRWuNpvFLBcCuo 9BnnomuO8RAod67svmN4ueF6e3q4MuZbiNq7xKiIzoKpCgPsHSWO0wi3KPtCLAC8 YYBGRUOb/dJGwUvRt8JTGPQviZpE0ekVG3oQ9lGi2TGOFSyeY/AJvHWxCoDJ+7he xsgAhT8L3CCm+ReA3yXUZy9bx4HAYdhJaB/JSHc7yjqW26RdHPjVaKV1MDwgjLRw z6mJ2P+q/4ZwGVHWl/J5lmIykiiV79br3vL13HsU3Y83gQYLKLwPWq5yqlcIzX0A 8LcWypZWj4QZnnwv5SDl2q7+047M9AMCcpe/wWVG//8bUcIwxi92Yy3KIHjWn8eN IFlKMQdFmJ31kowZWuw0zp8rNsC7IvFk+K94CiiLTXPDKWbmp8WB+ecoZsyeqSGh BZwaLX7Kc+eCS2GJUEi/H5ZmJNGuH1EhxT7xcgLR7CIikGR3pgJMG2yFoHXQCrKf mlfwlEA7Ke1H+0k82iY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLhq9YNSSOIj+wtoPX4j K0BkVy+ZLiHHlkWYeDGqNi4Y26Uwjj7/PGO5pLMtVQaDgc5Yi4NV/ZtPEqX2Inpa 21YtaMdmKLUeBvcjsXjY10N0RbFJZV0yVf5zYdar5jQIzWzk6SHOzssEmPks3NU1 8YL4pGu4xeWB21jMDIH7o4Cwte3C4fhVh8cPHlXIMp4AE79a3J6gpqdWKj6UFbIO 7+x5K4UCcZjgocd3o4PrQ2lgYSZa1AD5Tjba0qbI+t+yQEF4WlxbRzacDkQSoK5O E9221BJMOGSCYGgQtykq+2cuq1kwxkB9O/4AcbGeY33d+53olqTFcrNb+YwGUq+U iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 88824165547925528973798132743893799554 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 15:58:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 15:58:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '3cx.okam.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19784115385563413653229072492266929323769816548486176196654345745607973721111431615363803586503548333595751275164164202757663999291669711822720243092899057201652565274791513370113835131091347773711884398518014982629479697979953499365950570709839413675636372246854761919775161853061742819027534260837871857854867955386957761927994911799825462175682119043185953447797991807845300789565680635699456816542567184571574820880826800926671375832777028427233332776946986275508240401313622566237691607570852280679676737826507769312894322036832800660022844810411668901330446981182207961973710580171863954739133198623072790221961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3cx.okam.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3cx.okam.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 668c61c05ecbc09e8d2dba37e7847682018091f6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0074ac9e54690c1c4b961cb27a1a4875b5d6d68c1ab78db969449e47cd23dbf3581edd3354e69b3289d7a1724de57e465a4f678254e9bedc8e095baefe365743f0f5bc2660ac8d3c49ef2970ba0daf73ed89ba850225cacbbde033c9f3698f78231c862e8a4ca42dbb63b9e1d9340d95d1f09aad798567390713c9ca1ed9280a9b6d156f69e27ee23331451bbfba000e6f6e730b21beff30e0515ae369bc52c1702ba8f419e7a26b8ef1102877aeecbe6378b9e17a7b7ab832e65b88dabbc4a888ce82a90a03ec1d258ed308b728fb422c00bc61804645439bfdd246c14bd1b7c25318f42f899a44d1e9151b7a10f651a2d9318e152c9e63f009bc75b10a80c9fbb85ec6c800853f0bdc20a6f91780df25d4672f5bc781c061d849681fc948773bca3a96dba45d1cf8d568a575303c208cb470cfa989d8ffaaff86701951d697f279966232922895efd6ebdef2f5dc7b14dd8f3781060b28bc0f5aae72aa5708cd7d00f0b716ca96568f84199e7c2fe520e5daaefed38eccf403027297bfc16546ffff1b51c230c62f76632dca2078d69fc78d20594a310745989df5928c195aec34ce9f2b36c0bb22f164f8af780a288b4d73c32966e6a7c581f9e72866cc9ea921a1059c1a2d7eca73e7824b61895048bf1f966624d1ae1f5121c53ef17202d1ec2222906477a6024c1b6c85a075d00ab29f9a57f094403b29ed47fb493cda26