kassis.dcmusic.ca
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 54:be:3f:01:ef:a4:c1:cd:9c:0a:8e:be:dc:95:ba:c2 was issued on by SSL Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kassis.dcmusic.ca
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 54:be:3f:01:ef:a4:c1:cd:9c:0a:8e:be:dc:95:ba:c2Serial Number (int): 112642965994253839534117589568414137026
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 7c:7e:81:56:86:7a:9c:5c:79:56:af:fb:74:4d:7a:53:db:53:eb:ef
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): 24:e7:80:a8:aa:bd:14:87:be:df:33:91:18:7d:9a:ac:45:f2:4e:d9
Fingerprint (sha256): 5c:94:27:c2:53:dd:b0:74:0f:20:63:48:c2:46:a1:d4:92:e1:45:2a:70:35:a7:6c:5f:ab:9b:99:fd:91:15:f5
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate kassis.dcmusic.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kassis.dcmusic.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kassis.dcmusic.ca
Other certificates including the domain name dcmusic.ca
(limited to 100 certificates)
virgrinia.dcmusic.ca
lgeguhr.dcmusic.ca
rnmuo.dcmusic.ca
vxweo.dcmusic.ca
ramlas.dcmusic.ca
milki.dcmusic.ca
ladudleya.dcmusic.ca
bwida.dcmusic.ca
fuethy.dcmusic.ca
bigeva.dcmusic.ca
camarmarotha.dcmusic.ca
lfyxdht.dcmusic.ca
arulna.dcmusic.ca
vecom.dcmusic.ca
asocv.dcmusic.ca
lzlq.dcmusic.ca
takrank.dcmusic.ca
ljxtx.dcmusic.ca
kupinglowo.dcmusic.ca
lbxh.dcmusic.ca
imperva.com
clambrighte.dcmusic.ca
mdkr.dcmusic.ca
tiagorosado.dcmusic.ca
indigf.dcmusic.ca
usfhn.dcmusic.ca
ramon.dcmusic.ca
brownse.dcmusic.ca
chsung.dcmusic.ca
bagar.dcmusic.ca
gamersony.dcmusic.ca
hjyoi.dcmusic.ca
hazbig.dcmusic.ca
rtozza.dcmusic.ca
meden.dcmusic.ca
ovml.dcmusic.ca
retainedrecruiters.dcmusic.ca
snkg.dcmusic.ca
ownh.dcmusic.ca
bvdte.dcmusic.ca
deepeastmotorsports.dcmusic.ca
naas.dcmusic.ca
bihiorneira.dcmusic.ca
ovqu.dcmusic.ca
marilyn.dcmusic.ca
kgfh.dcmusic.ca
lodinsa.dcmusic.ca
lucas.dcmusic.ca
floreds.dcmusic.ca
zjipz.dcmusic.ca
hihhfp.dcmusic.ca
euqa.dcmusic.ca
rkcho.dcmusic.ca
agunlu.dcmusic.ca
ebuhealth.dcmusic.ca
sadirin.dcmusic.ca
sotong.dcmusic.ca
gzody.dcmusic.ca
ossborne.dcmusic.ca
dcmusic.ca
cintial.dcmusic.ca
kudahorse.dcmusic.ca
vlyi.dcmusic.ca
william.dcmusic.ca
mbusut.dcmusic.ca
thomastun.dcmusic.ca
babscock.dcmusic.ca
cabinh.dcmusic.ca
dankr.dcmusic.ca
axwrh.dcmusic.ca
lengo.dcmusic.ca
gmpo.dcmusic.ca
maggellan.dcmusic.ca
cugyv.dcmusic.ca
vouvray.dcmusic.ca
bigperrysale.dcmusic.ca
lhpu.dcmusic.ca
fvks.dcmusic.ca
rpnlihi.dcmusic.ca
ajoseph.dcmusic.ca
fmmb.dcmusic.ca
fpqo.dcmusic.ca
vivyian.dcmusic.ca
planclothing.dcmusic.ca
dcmusic.ca
biduj.dcmusic.ca
kobvin.dcmusic.ca
dgabv.dcmusic.ca
pivirgili.dcmusic.ca
saxo.dcmusic.ca
hajime.dcmusic.ca
sjkr.dcmusic.ca
yarbro.dcmusic.ca
krliga.dcmusic.ca
slotomaniag.dcmusic.ca
littlebirchi.dcmusic.ca
tahubulat.dcmusic.ca
acan.dcmusic.ca
uubtlz.dcmusic.ca
jondes.dcmusic.ca
lgeguhr.dcmusic.ca
rnmuo.dcmusic.ca
vxweo.dcmusic.ca
ramlas.dcmusic.ca
milki.dcmusic.ca
ladudleya.dcmusic.ca
bwida.dcmusic.ca
fuethy.dcmusic.ca
bigeva.dcmusic.ca
camarmarotha.dcmusic.ca
lfyxdht.dcmusic.ca
arulna.dcmusic.ca
vecom.dcmusic.ca
asocv.dcmusic.ca
lzlq.dcmusic.ca
takrank.dcmusic.ca
ljxtx.dcmusic.ca
kupinglowo.dcmusic.ca
lbxh.dcmusic.ca
imperva.com
clambrighte.dcmusic.ca
mdkr.dcmusic.ca
tiagorosado.dcmusic.ca
indigf.dcmusic.ca
usfhn.dcmusic.ca
ramon.dcmusic.ca
brownse.dcmusic.ca
chsung.dcmusic.ca
bagar.dcmusic.ca
gamersony.dcmusic.ca
hjyoi.dcmusic.ca
hazbig.dcmusic.ca
rtozza.dcmusic.ca
meden.dcmusic.ca
ovml.dcmusic.ca
retainedrecruiters.dcmusic.ca
snkg.dcmusic.ca
ownh.dcmusic.ca
bvdte.dcmusic.ca
deepeastmotorsports.dcmusic.ca
naas.dcmusic.ca
bihiorneira.dcmusic.ca
ovqu.dcmusic.ca
marilyn.dcmusic.ca
kgfh.dcmusic.ca
lodinsa.dcmusic.ca
lucas.dcmusic.ca
floreds.dcmusic.ca
zjipz.dcmusic.ca
hihhfp.dcmusic.ca
euqa.dcmusic.ca
rkcho.dcmusic.ca
agunlu.dcmusic.ca
ebuhealth.dcmusic.ca
sadirin.dcmusic.ca
sotong.dcmusic.ca
gzody.dcmusic.ca
ossborne.dcmusic.ca
dcmusic.ca
cintial.dcmusic.ca
kudahorse.dcmusic.ca
vlyi.dcmusic.ca
william.dcmusic.ca
mbusut.dcmusic.ca
thomastun.dcmusic.ca
babscock.dcmusic.ca
cabinh.dcmusic.ca
dankr.dcmusic.ca
axwrh.dcmusic.ca
lengo.dcmusic.ca
gmpo.dcmusic.ca
maggellan.dcmusic.ca
cugyv.dcmusic.ca
vouvray.dcmusic.ca
bigperrysale.dcmusic.ca
lhpu.dcmusic.ca
fvks.dcmusic.ca
rpnlihi.dcmusic.ca
ajoseph.dcmusic.ca
fmmb.dcmusic.ca
fpqo.dcmusic.ca
vivyian.dcmusic.ca
planclothing.dcmusic.ca
dcmusic.ca
biduj.dcmusic.ca
kobvin.dcmusic.ca
dgabv.dcmusic.ca
pivirgili.dcmusic.ca
saxo.dcmusic.ca
hajime.dcmusic.ca
sjkr.dcmusic.ca
yarbro.dcmusic.ca
krliga.dcmusic.ca
slotomaniag.dcmusic.ca
littlebirchi.dcmusic.ca
tahubulat.dcmusic.ca
acan.dcmusic.ca
uubtlz.dcmusic.ca
jondes.dcmusic.ca
Certificate
The complete raw certificate details for kassis.dcmusic.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0zCCA7ugAwIBAgIQVL4/Ae+kwc2cCo6+3JW6wjANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTIyMTIyMjA5MDY1OVoXDTIzMDQwNTA5MDY1M1owHDEaMBgG A1UEAwwRa2Fzc2lzLmRjbXVzaWMuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDUrR89/zrrRYq/Tb/KZYhN6SZtHt8KQWX4/dp22JfAkXICR4mE/bYY LlZhSkto3QQac8cRVhW/sXWsQ8XFguBWm+6e6lUJd/yTrSDbeFC54IF3LfwwsQho cQ6yeTbB3rE1i6LwhNyjDBygzplLJNLrpEEKMG00z/K3LFP+FeScABUyG0zH9FEg 5N1lcRVz2J4z36KBrXi8hP1BJ0jMfFVKAripEfTLigesHoemNePTmdKN7/3KCGyP vwjE943AzHBdkSFBfaUrEC/jX+VlbniwTnJP/cHsDv7GX8qfUjg+nznGCpvhpVeF IbrhZqQ4NBofI+dkeaWjTTlbeBWTs39XAgMBAAGjggHCMIIBvjAMBgNVHRMBAf8E AjAAMB8GA1UdIwQYMBaAFCYUfuDc16b34tQEJ99h8cLs5zLKMHIGCCsGAQUFBwEB BGYwZDBABggrBgEFBQcwAoY0aHR0cDovL2NlcnQuc3NsLmNvbS9TU0xjb20tU3Vi Q0EtU1NMLVJTQS00MDk2LVIxLmNlcjAgBggrBgEFBQcwAYYUaHR0cDovL29jc3Bz LnNzbC5jb20wHAYDVR0RBBUwE4IRa2Fzc2lzLmRjbXVzaWMuY2EwUQYDVR0gBEow SDAIBgZngQwBAgEwPAYMKwYBBAGCqTABAwEBMCwwKgYIKwYBBQUHAgEWHmh0dHBz Oi8vd3d3LnNzbC5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAUBggrBgEFBQcDAgYI KwYBBQUHAwEwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybHMuc3NsLmNvbS9T U0xjb20tU3ViQ0EtU1NMLVJTQS00MDk2LVIxLmNybDAdBgNVHQ4EFgQUfH6BVoZ6 nFx5Vq/7dE16U9tT6+8wDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4ICAQABiFVtnaF601Sk9e/Vnf9W+/Jm2oxB8pVa ZnPQb2FR2Jx+cx2rYAzORoVNbJ+YOpo9dokcy2TdupkaGKAaPyLaiOUCvyJTAnKZ vJxCi5UzdMa9rrss5wQkv5AU++mgI9U2WPR2elDVxgTs530V3g+moRvbpXQr0Lbl 2fyqs1BGONEAaVzpBxjXYYEhS6a+WemFWdu6Czr9Dx+8n/U2rrv0cPmnE3mTKz+M t3AvxN7vIDzVzkQsN3Jg0rqPX5LhFmUTKo7K24v9z41lJSq+qPFREYN+GzduRkfw MFVnTXLIExySZty9KUCz4hVHkmN07Iejs0ZvTWJwZ6ksqMoNLrTZLp+B21vW66Pz ndX/humQbzZpRWClptTOP788ywhTxrMtYUEgmbvt/HDKc4wJH5Svdl1bCD3EAvsv +shWHDktAU/3rYIe2P/dySs1idExPG60MHmQRGKk+hKnHXnLGnRHkmP8qBQ6MDkw otHS1/tzY7hKFogtTfTJ/zGo+jxkoVkrRrOMqcIoMZ1xQoxIE2KW9Dg0QK3vrauk +m95tzumz9kq5dLdKC/JUjLs/aBcJbqLTkCdtyMswPnGy2CFUgc3/kNvOGH0w6rM Comwu9z9Ke7h3cmCueCYY8XpFPO7aqF+5CAKkgL2bm6e7PEYoVxvoXP5KOuYBJ+6 ryQOr1kUEQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K0fPf8660WKv02/ymWI TekmbR7fCkFl+P3adtiXwJFyAkeJhP22GC5WYUpLaN0EGnPHEVYVv7F1rEPFxYLg VpvunupVCXf8k60g23hQueCBdy38MLEIaHEOsnk2wd6xNYui8ITcowwcoM6ZSyTS 66RBCjBtNM/ytyxT/hXknAAVMhtMx/RRIOTdZXEVc9ieM9+iga14vIT9QSdIzHxV SgK4qRH0y4oHrB6HpjXj05nSje/9yghsj78IxPeNwMxwXZEhQX2lKxAv41/lZW54 sE5yT/3B7A7+xl/Kn1I4Pp85xgqb4aVXhSG64WakODQaHyPnZHmlo005W3gVk7N/ VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 112642965994253839534117589568414137026 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 09:06:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-05 09:06:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'kassis.dcmusic.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26847890312375462498845897291291255985287644709115827285312703747753003956472567369275778686864045746264680868519229555930453045848918329481841187103826836930410273614256422915028066140639140445130044780966945387527165356547206748561973991058466811654249569826482780570090810084406308811996249247357038232253539671601501474164149096644376170376971573125666085801991581116477977945295894682687897174100927915384529693684001613279110877042489984565256930157038081956455663146980538193806322379014769485492839888579037848492979381095596460489349536290370396246314818781985648714981125386560110486088486498770248239644503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kassis.dcmusic.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c7e8156867a9c5c7956affb744d7a53db53ebef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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