ideas.aetn.org
Issued by Network Solutions DV Server CA 2
About this certificate
This digital certificate with serial number a4:df:7b:65:33:82:94:7a:97:3a:7f:fb:38:0c:fe:89 was issued on by Network Solutions L.L.C..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ideas.aetn.org,OU=Domain Control Validated+OU=nsProtect Secure Xpress
Network Solutions L.L.C.
Organization:
Network Solutions L.L.C.
State / Province:
VA
Locality: Herndon
Country: US
Locality: Herndon
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): a4:df:7b:65:33:82:94:7a:97:3a:7f:fb:38:0c:fe:89Serial Number (int): 219153776262546729842624805990302547593
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 2a:3e:af:33:9b:19:b8:3d:df:b4:88:50:fe:c4:be:2b:82:aa:2a:eb
AuthorityKeyId: 51:ce:df:54:1d:b7:2c:57:ab:68:61:48:02:1a:d3:b2:85:ec:40:aa
Fingerprint (sha1): c1:79:f8:e4:2e:b8:9f:6a:74:cb:71:16:d3:77:e9:3b:b5:a5:43:33
Fingerprint (sha256): 57:ed:97:b9:9c:ec:e9:e0:f8:d7:17:30:81:10:38:c5:fd:2d:fd:4d:07:dc:a6:f2:a0:71:dd:79:30:6e:fc:cf
Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt
Revocation information
OCSP Server: http://ocsp.netsolssl.comCRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl
Check the revocation status for certificate ideas.aetn.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ideas.aetn.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ideas.aetn.org
www.ideas.aetn.org
www.ideas.aetn.org
Other certificates including the domain name aetn.org
(limited to 100 certificates)
reciprocity.aetn.org
www.aetn.org
watch.aetn.org
to.aetn.org
to.aetn.org
ideaslms.aetn.org
watch.aetn.org
to.aetn.org
lms-1.aetn.org
lms-1.aetn.org
lms-1.aetn.org
ideaslms.aetn.org
ideas.aetn.org
*.aetn.org
*.aetn.org
ideas.aetn.org
watch.aetn.org
watch.aetn.org
watch.aetn.org
watch.aetn.org
to.aetn.org
watch.aetn.org
to.aetn.org
saml.aetn.org
watch.aetn.org
reports.aetn.org
watch.aetn.org
to.aetn.org
*.aetn.org
watch.aetn.org
to.aetn.org
to.aetn.org
www.aetn.org
to.aetn.org
watch.aetn.org
watch.aetn.org
to.aetn.org
www.aetn.org
to.aetn.org
to.aetn.org
to.aetn.org
to.aetn.org
ideaslms.aetn.org
to.aetn.org
watch.aetn.org
watch.aetn.org
watch.aetn.org
*.aetn.org
media.aetn.org
media.aetn.org
watch.aetn.org
to.aetn.org
to.aetn.org
www.aetn.org
watch.aetn.org
to.aetn.org
to.aetn.org
ideaslms.aetn.org
watch.aetn.org
to.aetn.org
lms-1.aetn.org
lms-1.aetn.org
lms-1.aetn.org
ideaslms.aetn.org
ideas.aetn.org
*.aetn.org
*.aetn.org
ideas.aetn.org
watch.aetn.org
watch.aetn.org
watch.aetn.org
watch.aetn.org
to.aetn.org
watch.aetn.org
to.aetn.org
saml.aetn.org
watch.aetn.org
reports.aetn.org
watch.aetn.org
to.aetn.org
*.aetn.org
watch.aetn.org
to.aetn.org
to.aetn.org
www.aetn.org
to.aetn.org
watch.aetn.org
watch.aetn.org
to.aetn.org
www.aetn.org
to.aetn.org
to.aetn.org
to.aetn.org
to.aetn.org
ideaslms.aetn.org
to.aetn.org
watch.aetn.org
watch.aetn.org
watch.aetn.org
*.aetn.org
media.aetn.org
media.aetn.org
watch.aetn.org
to.aetn.org
to.aetn.org
Certificate
The complete raw certificate details for ideas.aetn.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIRAKTfe2UzgpR6lzp/+zgM/okwDQYJKoZIhvcNAQELBQAw ejELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlZBMRAwDgYDVQQHEwdIZXJuZG9uMSEw HwYDVQQKExhOZXR3b3JrIFNvbHV0aW9ucyBMLkwuQy4xKTAnBgNVBAMTIE5ldHdv cmsgU29sdXRpb25zIERWIFNlcnZlciBDQSAyMB4XDTE2MDQyNjAwMDAwMFoXDTE3 MDUxMDIzNTk1OVowXjEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVk MSAwHgYDVQQLExduc1Byb3RlY3QgU2VjdXJlIFhwcmVzczEXMBUGA1UEAxMOaWRl YXMuYWV0bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTq5FI wqFzT74kyo/KcgAlDYS7rhJindMSYa3aiI3U65N6sgXdM1J4vzVak0BTlMqXoUQO Jidn4ZLpEKeWdO4xCFFvO3600hePdfYnbXSEVJB/ARvBuJHA1CmwtsaY9YUigi8E Ir/vEYhD2+cWhkmt1VwZpW6SODkP2pi//xuynHcYlLW8hdcFhGhyJ7rVfmdu8kOj I2ovK3IwjqdssFIvbgi+iMeYX3vQKBk6m0+P51/LmnRrVKjjxehs/XAcTkxOZd4F HNJHauddKLk2c1+CnAdsKFQ9uW6tL5w94v+eKp8hhvA6O/xCyzQ4H+mrmteMdx3C iD1vx83Fs8lnBx1hAgMBAAGjggHvMIIB6zAfBgNVHSMEGDAWgBRRzt9UHbcsV6to YUgCGtOyhexAqjAdBgNVHQ4EFgQUKj6vM5sZuD3ftIhQ/sS+K4KqKuswDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMHUGA1UdIARuMGwwYAYMKwYBBAGGDgECAQkBMFAwTgYIKwYBBQUHAgEW Qmh0dHA6Ly93d3cubmV0d29ya3NvbHV0aW9ucy5jb20vbGVnYWwvU1NMLWxlZ2Fs LXJlcG9zaXRvcnktY3BzLmpzcDAIBgZngQwBAgEwSQYDVR0fBEIwQDA+oDygOoY4 aHR0cDovL2NybC5uZXRzb2xzc2wuY29tL05ldHdvcmtTb2x1dGlvbnNEVlNlcnZl ckNBMi5jcmwwewYIKwYBBQUHAQEEbzBtMEQGCCsGAQUFBzAChjhodHRwOi8vY3J0 Lm5ldHNvbHNzbC5jb20vTmV0d29ya1NvbHV0aW9uc0RWU2VydmVyQ0EyLmNydDAl BggrBgEFBQcwAYYZaHR0cDovL29jc3AubmV0c29sc3NsLmNvbTAtBgNVHREEJjAk gg5pZGVhcy5hZXRuLm9yZ4ISd3d3LmlkZWFzLmFldG4ub3JnMA0GCSqGSIb3DQEB CwUAA4IBAQBVUYSwVXwNFV6FHrIC3P5EyV8rMtZqRAGhfnF4O8oCLw5MiFdywCe7 Qy1KThpZmB5Wve2L67UL8Q6IdJfYTbTKOZYo6mQ4oDDjhZEgmJHrKqnjdT0OvyO7 /6QFo99aJU6OvJ7ZMsJOfC9aVHA0sC4azsPX3sYnbwq9Jh3LqGt6XimA+jLALLVh R2MEHy5/oKQMQc0hHNhC33lG6ektZ9rVE8gAwu9hup3TmEGwGiFua8akM+3Kh/jy vdQ03wpMLqbKEDMJ3CPNecJF1KfWW8AZYEIO4fVffG6peotbz5nMfx2yWmd/UCCL KK+2JzLcLXFNClx7j/IwzZdHcZW/Mdpn -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06uRSMKhc0++JMqPynIA JQ2Eu64SYp3TEmGt2oiN1OuTerIF3TNSeL81WpNAU5TKl6FEDiYnZ+GS6RCnlnTu MQhRbzt+tNIXj3X2J210hFSQfwEbwbiRwNQpsLbGmPWFIoIvBCK/7xGIQ9vnFoZJ rdVcGaVukjg5D9qYv/8bspx3GJS1vIXXBYRocie61X5nbvJDoyNqLytyMI6nbLBS L24IvojHmF970CgZOptPj+dfy5p0a1So48XobP1wHE5MTmXeBRzSR2rnXSi5NnNf gpwHbChUPblurS+cPeL/niqfIYbwOjv8Qss0OB/pq5rXjHcdwog9b8fNxbPJZwcd YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 219153776262546729842624805990302547593 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herndon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions DV Server CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsProtect Secure Xpress' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ideas.aetn.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26720885443417037813659693941535472734318625789819172108486539800420108567044377692342092246980129770491329013465392587374721181783874206920730646975576548774839465814035595722578268092301095075277800106631644998254710686252450273771945587635489684763969311733983836632989704517483009170720476859282018847223756251433539174936365640464327257460344588450198944015083905281283909810682264280146654449169368156196854339885726714917880215114892807505833668416429321554121429866256141216794875052898344672791521023688257703714225471567150187177613239827510668902712836114791345841412793609848690967578520689973277395197281 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51cedf541db72c57ab686148021ad3b285ec40aa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a3eaf339b19b83ddfb48850fec4be2b82aa2aeb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.9.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas.aetn.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideas.aetn.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00555184b0557c0d155e851eb202dcfe44c95f2b32d66a4401a17e71783bca022f0e4c885772c027bb432d4a4e1a59981e56bded8bebb50bf10e887497d84db4ca399628ea6438a030e38591209891eb2aa9e3753d0ebf23bbffa405a3df5a254e8ebc9ed932c24e7c2f5a547034b02e1acec3d7dec6276f0abd261dcba86b7a5e2980fa32c02cb5614763041f2e7fa0a40c41cd211cd842df7946e9e92d67dad513c800c2ef61ba9dd39841b01a216e6bc6a433edca87f8f2bdd434df0a4c2ea6ca103309dc23cd79c245d4a7d65bc01960420ee1f55f7c6ea97a8b5bcf99cc7f1db25a677f50208b28afb62732dc2d714d0a5c7b8ff230cd97477195bf31da67