extranet.brandontrust.org

- The Brandon Trust -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number 7a:35:c9:7b:13:a6:ac:4f:be:54:5e:b4:ce:24:e1:33 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Brandon Trust

Organization: The Brandon Trust
Organization unit: Informations Systems
Organization unit: InstantSSL
Address: Olympus House
Postal code: BS34 5TA
State / Province: Avon
Locality: Bristol
Country: GB

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:35:c9:7b:13:a6:ac:4f:be:54:5e:b4:ce:24:e1:33
Serial Number (int): 162445093734738116189549426109764133171
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7a:58:eb:9d:46:fe:7d:fd:51:7c:7f:93:e8:9e:c3:92:b9:49:9d:28
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): 99:09:00:2a:02:3a:4b:c2:84:7e:c8:8a:2f:6f:a7:1f:2f:71:54:56
Fingerprint (sha256): 50:37:e1:2f:88:78:88:71:94:e3:a4:b5:ad:72:0c:70:b9:7f:20:2d:d1:61:57:93:49:ad:7f:53:52:3e:71:fc

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate extranet.brandontrust.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extranet.brandontrust.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extranet.brandontrust.org
www.extranet.brandontrust.org

Other certificates including the domain name brandontrust.org

(limited to 100 certificates)
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
anywhere.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
myfundraising.brandontrust.org
helpdesk.fintonhouse.org.uk
connect.brandontrust.org
helpdesk.fintonhouse.org.uk
mail.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
assetmgmt.jennycraig.com
www.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
applicationsupport.fqml.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.brandontrust.org
helpdesk.mvplaw.com
*.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
www.brandontrust.org
helpdesk.fintonhouse.org.uk
*.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
webmail.brandontrust.org
extranet.brandontrust.org
helpline.petron.com
helpdesk.fintonhouse.org.uk
servicedesk.digicelgroup.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpline.petron.com
helpdesk.fintonhouse.org.uk
www.brandontrust.org
helpdesk.neopharm.ca
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
www.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
www.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.brandontrust.org
jobs.brandontrust.org
*.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
ayudati.auteco.com.co
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
myfundraising.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
www.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.mvplaw.com
*.brandontrust.org
*.brandontrust.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk

Certificate

The complete raw certificate details for extranet.brandontrust.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIu0gQR/nnh5WcPKMtLS
SPDgQZMxDRFr7tZe2UgtoUAjFSbMEk3LqQfnEA/nm/EMcCAD+2q2+TW7Lov778Dq
R6k089IJmX9S3UnoyTxkhJGoySDHPJ2Z0qa5okLSa7dPyrLxGIYEUazcavdenv7c
6Rk8U6X+aBrpkEq2wofEWBikVumddd3ruzOY/XWiuWRTm3uuHa2e3PNPADO/959I
BT4E0JcFf94LH0TXLimnfG7cQg2bC88sWPgcMaKY7N3Q6t/Pqmle/Zol6hZ6N/3b
VV+0Y1GvLsQlUYmvDaIFjg2EPnTvrt2l/CZ22g8vmObVYBBmrd9l0lVe6+Qa6Bny
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162445093734738116189549426109764133171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BS34 5TA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Olympus House'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Brandon Trust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informations Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extranet.brandontrust.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19762066723993203732829588257866112221747806482551811643477162974421611348962382605157960378900299063750104632439808268457118289883062833010396805821636963369321559693689489054516320385671554007241063538549716878011603955244413482066281644320873820952689825164286378646051849576358757357401152663854667945992159393267006092882807665051432483345502117199330201113023243567852428797022887272180753532776231348594234738566590646520082768817022758486212701940970250589177012273282875604037343750390388831121491415042795474790308381602269341134597947300152911064992921641147932862805049032702633602014750614934187033621029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a58eb9d46fe7dfd517c7f93e89ec392b9499d28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.brandontrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extranet.brandontrust.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001afc582f0596b3a837cd4e7a697ea73cf38e14a23849b10d24b14b3fabbbe0969b23c38ff0dc040ee65cc3c5a71dafa546d9f0f0e61ae6638d6efeaff9bda95aa051745d26a63d9d79d975298438b64dbd467a0fe061a3f23be036d40db52297de0aca8b6d69dad6bf5c9d9464c80ec3bac6d0793828f8d059b3a5dfa148a12be2bb522d1bb80654f734c0b277cbe9ad8fc564c8e3504b4acb58d19f3e86e54d24bc2c6d23f71ba83b236761229203ac9db9df4defd64f87734ad16802b5c8d05af7c1781fce19cadb296a0bc857f1f8acc2c99726978a48d45ca7fa810dbf83e6f6377eee7e274e6d02afb890287a538cca4b239d0cf106d82184b10518fbc7