www.seedfunnel.com
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 2b:d1:7c:ef:4c:29:af:86:96:64:b5:33:3d:a6:1e:77 was issued on by StartCom Ltd..
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.seedfunnel.com
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 2b:d1:7c:ef:4c:29:af:86:96:64:b5:33:3d:a6:1e:77Serial Number (int): 58244527840078110827397450560306552439
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 44:5c:66:3f:e7:c8:3c:1b:f2:bc:ee:a4:e6:f3:77:c4:2b:90:2e:72
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af
Fingerprint (sha1): 1d:6b:33:e0:61:2c:11:5f:db:25:9a:28:a3:18:7d:b1:84:a5:a9:ea
Fingerprint (sha256): 68:93:ba:2b:fa:04:56:8d:73:90:43:72:29:94:0e:5a:30:bc:89:8b:0c:dd:fd:10:58:b9:8f:f9:69:ee:5a:5d
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate www.seedfunnel.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.seedfunnel.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.seedfunnel.com
cowork.seedfunnel.com
penta.seedfunnel.com
metru.seedfunnel.com
hiddenwall.seedfunnel.com
cowork.seedfunnel.com
penta.seedfunnel.com
metru.seedfunnel.com
hiddenwall.seedfunnel.com
Other certificates including the domain name seedfunnel.com
(limited to 100 certificates)
seedfunnel.com
ldap.ocean.seedfunnel.com
gitlab.ocean.seedfunnel.com
cowork.seedfunnel.com
www.seedfunnel.com
seedfunnel.com
*.ocean.seedfunnel.com
hidden.seedfunnel.com
atlassian.seedfunnel.com
xver.cloud
www.deltanow.net
metru.seedfunnel.com
www.connectedmachines.com
penta.seedfunnel.com
ldapsf.seedfunnel.com
compara.seedfunnel.com
*.seedfunnel.com
gitlab-ui.ocean.seedfunnel.com
seedfunnel.com
ocean.seedfunnel.com
cowork.seedfunnel.com
hbg.seedfunnel.com
storyglory.seedfunnel.com
www.seedfunnel.com
nobodyknows.tk
gps.seedfunnel.com
experthia.seedfunnel.com
deporteconprincipios.com
*.seedfunnel.com
base.seedfunnel.com
gitlab.metru.seedfunnel.com
*.seedfunnel.com
*.seedfunnel.com
tabatait.com
playground.seedfunnel.com
*.ocean.seedfunnel.com
*.ocean.seedfunnel.com
base.ocean.seedfunnel.com
v2dev.gpsfleet.my
henryoliver.me
deep.ocean.seedfunnel.com
*.seedfunnel.com
mail.ocean.seedfunnel.com
metru.seedfunnel.com
*.seedfunnel.com
api.metru.seedfunnel.com
*.seedfunnel.com
www.qttogether.com
ewooki.seedfunnel.com
seedfunnel.com
seedfunnel.com
strebersdorfer.at
owncloud.seedfunnel.com
mimenu.app
ldap.ocean.seedfunnel.com
gitlab.ocean.seedfunnel.com
cowork.seedfunnel.com
www.seedfunnel.com
seedfunnel.com
*.ocean.seedfunnel.com
hidden.seedfunnel.com
atlassian.seedfunnel.com
xver.cloud
www.deltanow.net
metru.seedfunnel.com
www.connectedmachines.com
penta.seedfunnel.com
ldapsf.seedfunnel.com
compara.seedfunnel.com
*.seedfunnel.com
gitlab-ui.ocean.seedfunnel.com
seedfunnel.com
ocean.seedfunnel.com
cowork.seedfunnel.com
hbg.seedfunnel.com
storyglory.seedfunnel.com
www.seedfunnel.com
nobodyknows.tk
gps.seedfunnel.com
experthia.seedfunnel.com
deporteconprincipios.com
*.seedfunnel.com
base.seedfunnel.com
gitlab.metru.seedfunnel.com
*.seedfunnel.com
*.seedfunnel.com
tabatait.com
playground.seedfunnel.com
*.ocean.seedfunnel.com
*.ocean.seedfunnel.com
base.ocean.seedfunnel.com
v2dev.gpsfleet.my
henryoliver.me
deep.ocean.seedfunnel.com
*.seedfunnel.com
mail.ocean.seedfunnel.com
metru.seedfunnel.com
*.seedfunnel.com
api.metru.seedfunnel.com
*.seedfunnel.com
www.qttogether.com
ewooki.seedfunnel.com
seedfunnel.com
seedfunnel.com
strebersdorfer.at
owncloud.seedfunnel.com
mimenu.app
Certificate
The complete raw certificate details for www.seedfunnel.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIQK9F870wpr4aWZLUzPaYedzANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MDQwNDEwMzQ0MloXDTE3MDQw NDEwMzQ0MlowHTEbMBkGA1UEAwwSd3d3LnNlZWRmdW5uZWwuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS+aKRXvovUjZmmKHEx4hx+M0rQuCgTp pEf8Nic3xgPeHBJT/o+GfUxDVzPruzpfQjVujRPT2CwdKgtlOzC7M0PAW/huPm88 RgP5irR4oMJdajfRhHyuFXT0u6apm5X3w2zltLuCePE+o3ui6NiwlgYhIaNUUJOa Cvr0j7xcOPjFwYx1Z8uEkYghCryK2xeJkxW1G19LS9DVKOKcXnBYbkjF2F+94Oo5 asGK3ZtJ19lZXQ2xe5T9VCgRh4Koa7B9AgvxraA2QRC+873IQXFKQmOQsDIDj3G7 2iZg+mqZhgi9wW8n8wkMXhH73rFxpk4QPGu6W6CcDmZ+2gGgtuFNHQIDAQABo4IC MjCCAi4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF BQcDATAJBgNVHRMEAjAAMB0GA1UdDgQWBBREXGY/58g8G/K87qTm83fEK5AucjAf BgNVHSMEGDAWgBTXkU4BxLC/+Mhnk0Sc5zP6rZMMrzBvBggrBgEFBQcBAQRjMGEw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5BggrBgEFBQcw AoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLnNlcnZlcjEuY3J0 MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1z ZXJ2ZXIxLmNybDB7BgNVHREEdDByghJ3d3cuc2VlZGZ1bm5lbC5jb22CFWNvd29y ay5zZWVkZnVubmVsLmNvbYIUcGVudGEuc2VlZGZ1bm5lbC5jb22CFG1ldHJ1LnNl ZWRmdW5uZWwuY29tghloaWRkZW53YWxsLnNlZWRmdW5uZWwuY29tMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBQBgNVHSAESTBHMAgGBmeBDAEC ATA7BgsrBgEEAYG1NwECBTAsMCoGCCsGAQUFBwIBFh5odHRwOi8vd3d3LnN0YXJ0 c3NsLmNvbS9wb2xpY3kwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAF3ZRKpK+RIHAyqUdPbSAg2kIy22rNzi7xu+Fr+yZWB+DyZ5YM+pPt9n 2bJLtw9cdWELRc2pj+gb2UwGFgi1TaXNWB+ZcJVty345dLOmQE3wy/UllzETDTre b0/DEeIYSSgrooWFX8THM1zuL6AVz9i82LsykCNEe5hvl+uoFr/6uwk3tUlDs6d9 G+Jr6tT3Qyp1xMEEN8FWDScRAn8yHJsX7v4IWK0E5GtwPj8RN6LkR2oIPGHKlTCL Ow67DDpSVPJbXWQPHUz+JnlryEHKb2PO9+3A2wO4lUe5Ehcdu7o+TBgk/3Xj3x6E LE4TR3phkfabK2gnrfqWuyOJZcUKRYc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS+aKRXvovUjZmmKHEx4 hx+M0rQuCgTppEf8Nic3xgPeHBJT/o+GfUxDVzPruzpfQjVujRPT2CwdKgtlOzC7 M0PAW/huPm88RgP5irR4oMJdajfRhHyuFXT0u6apm5X3w2zltLuCePE+o3ui6Niw lgYhIaNUUJOaCvr0j7xcOPjFwYx1Z8uEkYghCryK2xeJkxW1G19LS9DVKOKcXnBY bkjF2F+94Oo5asGK3ZtJ19lZXQ2xe5T9VCgRh4Koa7B9AgvxraA2QRC+873IQXFK QmOQsDIDj3G72iZg+mqZhgi9wW8n8wkMXhH73rFxpk4QPGu6W6CcDmZ+2gGgtuFN HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 58244527840078110827397450560306552439 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 10:34:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 10:34:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.seedfunnel.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25902326032513821700482917845074626937013537203079386642997325551953321876886735371035001626428302215959478227431864025495612120439139598600297364631206442926739215241953104958598428201742608377906567399588412265296678058471954269703873681397007024670103131264831345282485169798647653304827977248644689104047350811243150951716727645682051532375465213490752516836390195349165808319828993848207700105831483509540313286542071995951071359955900542924061232032875690784584538274073061222860831024070115610571453320034630726901381787319999374497211270993723182174303869861875764560784338679128352582645077080618719846157597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 445c663fe7c83c1bf2bceea4e6f377c42b902e72 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seedfunnel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowork.seedfunnel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penta.seedfunnel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metru.seedfunnel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiddenwall.seedfunnel.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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