etsawsln0101.etslan.org

- Educational Testing Service -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 97:d8:30:85:af:6e:ea:14:d2:b7:4d:e9:f3:60:e2:8c was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Educational Testing Service

Organization: Educational Testing Service
Organization unit: Non-Production-Server
Organization unit: Hosted by Educational Testing Service
Organization unit: Unified Communications
Address: Rosedale Road
Postal code: 08541
State / Province: New Jersey
Locality: Princeton
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 97:d8:30:85:af:6e:ea:14:d2:b7:4d:e9:f3:60:e2:8c
Serial Number (int): 201835947632266373230343262261984944780
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b7:09:ef:ae:84:fa:8d:01:b0:81:bc:4b:1d:bb:ef:6d:74:85:ee:b0
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): ca:51:54:d7:bc:bb:2c:37:9d:a1:63:10:cf:d8:53:a6:bf:9f:c5:fa
Fingerprint (sha256): 5f:a1:53:3b:0b:7f:99:b6:33:6c:d1:e5:8d:49:f3:4b:34:80:2a:a0:1a:27:5a:a9:38:5d:db:3a:68:b9:e0:11

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate etsawsln0101.etslan.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etsawsln0101.etslan.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etsawsln0101.etslan.org
etsawsln0101.etsawscld.ets.org

Other certificates including the domain name etslan.org

(limited to 100 certificates)
webgatetestip-etsvcln0926.etslan.org
etsvcln2029.etslan.org
etsvcln0520.etslan.org
e1bspd.etslan.org
etsvln160.etslan.org
one-externalservices-a.etslan.org
etsln338.etslan.org
one-chat.ets.org
oimws11g-tst.ets.org
webgateprod-tlcsetsvcln0716.etslan.org
webgate1015-instport.etslan.org
authnsvc.ets.org
webgate1014-instport.etslan.org
etsvcln1039.etslan.org
etsvcln0855.etslan.org
etsvcnt1470.etsapptst.org
e1jspd.etslan.org
etsdaas2.etslan.org
etsln275.etslan.org
engvcln0002.etslan.org
webgatetest1-etsvcln166.etslan.org
etsvcln2025.etslan.org
etsvcln2072.etslan.org
uscdcvpn01.ets.org
webgatedev-ttl2etsvcln177.etslan.org
iviewer-uat.ets.org
oim11g-tst.ets.org
oimsoa11g.etslan.org
etsvcln186.etslan.org
e1bspd.etslan.org
webgate1014-instport.etslan.org
etsvcln2356.etslan.org
oim11g-stg.ets.org
one.perfdev.ets.org
webgatestage-etsvcln0538.etslan.org
one.perfdev-web-a.ets.org
etsvcln0533.etslan.org
webgatetestip-etsvcln0926.etslan.org
ussaovpn01.ets.org
etsvcln0896.etslan.org
erater-new-stage.ets.org
erater-new-dev.ets.org
ibt2-cloud-sb.ets.org
webgatestage-iptmgr.etslan.org
etsvcln212.etslan.org
webagterpmtest2-etsvcln1460.etslan.org
usndcvpn01.ets.org
webgateuat-ereg4.etslan.org
etssorry.ets.org
erater-new-test.ets.org
sente1orderstatus-stg.etslan.org
webgate4prod.etslan.org
etsvcln204.etslan.org
etsvcln165.etslan.org
etsvcnt1529.etslan.org
sente1orderstatus-test.etslan.org
webagatestage1-ip-etsvcln0927.etslan.org
webgateuat-etsvcln1461.etslan.org
one.perfdev.ets.org
e1jspd.etslan.org
etsvcln186.etslan.org
etsvcln0904.etslan.org
mytoms-stage.ets.org
etsvcln214.etslan.org
etsln275.etslan.org
sharepoint.ets.org
oimsoa11g-stg.ets.org
one-ot-metaservices.ets.org
etslan.org
sentpreprocess.etslan.org
webgatetest1-rmnetsvcln0888.etslan.org
webgateuat-ereg4.etslan.org
webgate-ipackager.etslan.org
sentpreprocess.etslan.org
etslan.org
etsvcnt0887.idmlab.org
erater-new-test.ets.org
webgatetest-iptmgr.etslan.org
etsvcnt1459.etslan.org
webgateuatrpm-etsvcln1462.etslan.org
oimsoa11g-tst.ets.org
webgatetest2-rmnetsvcln0889.etslan.org
webgateprod-esd.etslan.org
erater-new-test.ets.org
one.perfdev-web-a.ets.org
appd-test.ets.org
etsvcnt186.etslan.org
eias11g.ets.org
erater-new-test.ets.org
e1jspd.etslan.org
etsvcln0532.etslan.org
etsvcln2347.etslan.org
webgaterpmot1-etsvcln1463.etslan.org
eias11g.ets.org
etsvcnt185.etslan.org
etsawsln0101.etslan.org
etsvcln0855.etslan.org
etsln275.etslan.org
etsvcln1211.etslan.org
researchtech.ets.org

Certificate

The complete raw certificate details for etsawsln0101.etslan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgxu9knA74VY2M1gLl65
gVHLOgwbU8HyfrY2++djJ4D1orareIXxWVTXN0x3puzSZNJv9MdKWGF+S7Jx9AuK
mqkDB7YAVwZXToRsHCAzgkqfIky8f+d9xATTu70zaKDmtC7QgFz7r1JHXDyl5D/n
wk8Xqd4TuB15siXIuLTM3+gHO9cBaqy1aIqUuzNEKQjOABdN9xxP7zazLQEulFas
gmZPSFtfjNrRuh+QBlCgCLYn/TuWcEWg8RZEsFU+kERwDM77om+s9jb1nVSczKNA
9t9QqDbeFTIbH6ap4azWnod42inoB6QF6viZe1vaR2YBEcPWoLj9owuYhVePYba4
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 201835947632266373230343262261984944780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08541'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rosedale Road'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Non-Production-Server'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Educational Testing Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'etsawsln0101.etslan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20961689784881946618492396175517571428129715568246559932585135024588931786354986381093928131423956171821751070705279506307493160833599357826267251257522488874723707077825246406374214213699034706752361873373568650152528038966591359833760345757919258844481383959250721379243787269848800955822012753253141646855745487078980808141310359808623286240453004075987134036869097619144680312686792303794412794883911486412658899022070176791849568857656859784318974814343905108846421902494470821628116272649248725266175753293839011435793046634448854864309207207434358591401453388793653553851275228751849405437542957949192567699551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b709efae84fa8d01b081bc4b1dbbef6d7485eeb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsawsln0101.etslan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsawsln0101.etsawscld.ets.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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