www.oersterk.nu

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 72:1c:b4:85:19:be:2f:8f:89:3e:ec:46:4e:56:ee:4c was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oersterk.nu,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 72:1c:b4:85:19:be:2f:8f:89:3e:ec:46:4e:56:ee:4c
Serial Number (int): 151681037210560702132725174509317320268
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d3:c4:5d:18:4f:83:f9:f1:24:11:00:39:3b:99:21:31:0d:ec:a9:e4
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): db:84:54:5f:31:15:47:85:04:60:64:b8:4a:ef:ec:a4:7f:6b:9b:f5
Fingerprint (sha256): 5e:b7:12:03:50:e5:50:1a:e7:b6:e7:3c:4c:1b:ed:82:03:bd:de:3f:98:ec:c0:b2:d0:88:ac:ba:62:69:f5:b3

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate www.oersterk.nu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oersterk.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oersterk.nu
oersterk.nu

Other certificates including the domain name oersterk.nu

(limited to 100 certificates)
oersterk.nu
oersterk.nu
oersterk.nu
oersterk.nu
oersterk.nu
oersterk.nu
www.oersterk.nu
www.oersterk.nu
oersterk.nu
oersterk.nu
www.oersterk.nu
oersterk.nu
oersterk.nu
oersterk.nu
oersterk.nu
www.oersterk.nu
oersterk.nu
www.oersterk.nu

Certificate

The complete raw certificate details for www.oersterk.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHyzCCBrOgAwIBAgIQchy0hRm+L4+JPuxGTlbuTDANBgkqhkiG9w0BAQsFADCB
kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV
BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0xODA5MDYwMDAwMDBaFw0yMDA5MDUyMzU5NTlaMFMxITAfBgNVBAsTGERv
bWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UECxMLUG9zaXRpdmVTU0wxGDAW
BgNVBAMTD3d3dy5vZXJzdGVyay5udTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAOZ/cpIAla6NvMipzUkJuP/QUf+GhcO/O8QKfYS8Jaf5Hv8mkCdsr1ot
cwHSCt+U4NDOChW4fQ8H5TH0bENuoSH7jl3Fq2VSCC6G3eQSSun22vfdHk/NEvvY
QrDmnzQVxlf4az0xaG6TqHe638l41nex2q69uM2Dhy39YOEciGxTZ/dfcmpOZNdt
Cdui8ovx82MgLfO8+9ltTY2QNEVaihCd9T5wWzHu8vWKYV/u9Ecaol/yq6fjdc1l
hxN3cISh31zZgebJl1eDzVqdxYeCjMvuLHQwV5SzC6EgidWOxOnlH1TEOTyOkmR6
UqG3URiHlSl2eA98Azxhg+UMQrt/HbOalVAzDiPvhKGujU2oSowUCD7SaS7AtEXI
JHmtmYafMs/RwUZiR7JVSJx/c8o0TAMG40YOzn6h1gdGjEfQZ+GWHrrbw+JZBBQS
jrQS7Yftsw6fy287fDlmUub7jzwrnLs4O8E3ICY+h1vQhcJCW8qvxG/XoXPKJcDn
Z01jFv4QOG1yysVcIeAQm0c42n+xFnNUgva/quR4PTAFyojxCcY8ieq5chJI+rnK
adUjbPAOiQkgI4K2I7dtYSYa0x236ArynDOLnNdUYPzC6FTWZUYJQ++p6Iqbb8mi
O3t7lLkcmknnIk/I+vxbIHIF76pLA9565sKI0NP85IO3h2qdhmezAgMBAAGjggNb
MIIDVzAfBgNVHSMEGDAWgBSQr2o6lFoL2JDqElZz30O0Oija5zAdBgNVHQ4EFgQU
08RdGE+D+fEkEQA5O5khMQ3sqeQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC
MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYL
KwYBBAGyMQECAgcwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2Rv
LmNvbS9DUFMwCAYGZ4EMAQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwu
Y29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2
ZXJDQS5jcmwwgYUGCCsGAQUFBwEBBHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2Ny
dC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNl
cnZlckNBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29t
MCcGA1UdEQQgMB6CD3d3dy5vZXJzdGVyay5udYILb2Vyc3RlcmsubnUwggF+Bgor
BgEEAdZ5AgQCBIIBbgSCAWoBaAB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDE
e4l6qP3LAAABZa9WiiQAAAQDAEYwRAIgfoxb1Eq+a/FBrnLzB2wdrsFJBGY40JgI
VquDaoiXvyICIEdgwVsBQLMaKiszkzjvl25iL7wLBOdy0cX5Ww4Pt7YwAHcAXqdz
+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFlr1aKbwAABAMASDBGAiEA
2nFsTmwgmRmu08Gbe04xMyGmvEvRAuvgu/PfdsZTxx0CIQCYlva+ZmlKJnTUcEig
Ds6GDXNcEoAKcOiUb/NrbrYZKAB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+j
qh0HE9MMAAABZa9WiksAAAQDAEcwRQIhAOWYURB/mXDfLIzEOW0UdAjO9qd/eNBt
UQVaP5n+Rf17AiBC8i6o358jRJjBVbh/gm57+vw1pUT+5pk0jbW4bCYWXzANBgkq
hkiG9w0BAQsFAAOCAQEAet0hrvl6eyZKOwME4wRABTAX2tVSnOqZ17mVsFhOEvnJ
NsyueLshT9NBs6FkMkp4woyso/oKZPn/6/DUCDAoHTh0e1Gk4nxlxD5fhTWvb/Je
PhB2ZiOLMZzZUWpdQRoj+L7KgpvNQf8UuEivy46F85r8ovN6Ii+/hHbHD+wpvpwD
NzUHOaIOes1AOXVv8mqympTUblZX8K8wXR+FkBVVVYgaH4R+ojW/g0qqfT6SMjcj
byFepQq5xCjgTMmrFBpvh7yEbqkoeNqyQkoxfteX7mJPnp5pjl23LviiWDDDZdGe
diMIr2VqOD1RFkhtlEiSIDLUt268oe3haql55Cqu8w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151681037210560702132725174509317320268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oersterk.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940349153620575703380847605164898438671171293183542174301900610288050482083564986082945527539386825658486912448406267930453933127046169850571624122573058392230529388844520373937966948278958863973836109272396975513413525505852568184846261511895530664503266282612987789015292847146472034856854247073276667803297720108102141575865643912645510096953969481707961780339033245857742664800850703165417129751051237728090338621659009684043911791281559772129501260235709198204709336974900816103905908698267992034637377587350239917137628699283701026672996732696282229499737562076734435362580207963725965276525362598852585483681587128432733240016780438480602412306860295321279082726932785115504228674881843158782322609135980682400001612782582947528685903072252899496773010567305474162972482178943985163398520556726811120754620556873063382035021725439140751816584349813693339061777786385730427391270736845267314519576118733620274112758857079806189236542258045047310647064831734035808581605743020507364618611200536888491091288355552083922999797924483394217576063876907158215736396904427294826116208592691632016494165513548668980885765593526532495278229699863780711979186699243517389109562260871283917053868510374895201476116553268595210427289724851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3c45d184f83f9f1241100393b9921310deca9e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oersterk.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oersterk.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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