ctxasia.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f9:2f:f3:cf:5b:c9:d3:d2:05:41:49:45:a1:76:cd:a4 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ctxasia.com,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f9:2f:f3:cf:5b:c9:d3:d2:05:41:49:45:a1:76:cd:a4
Serial Number (int): 331226753956965647337227539482242633124
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: eb:9c:ea:ef:cf:87:58:28:e6:32:ce:85:ef:1a:24:44:1f:4e:95:b7
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 3c:18:9b:fd:3d:10:89:15:fd:cd:a7:50:fc:4d:34:a9:d3:6a:66:ec
Fingerprint (sha256): 78:17:e3:74:e6:d8:c5:3e:88:3a:4b:e1:14:9e:b1:ab:ed:1e:7a:23:8e:b4:8f:a7:05:9c:72:dd:cb:d4:3f:b0

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate ctxasia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctxasia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ctxasia.com
www.ctxasia.com

Other certificates including the domain name ctxasia.com

(limited to 100 certificates)
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
app.tom.sg
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
trainer.ctxasia.com
trainer.ctxasia.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
ctxasia.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
ctxasia.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
trainer.ctxasia.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
ctxasia.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
trainer.ctxasia.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
trainer.ctxasia.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com
sni88264.cloudflaressl.com

Certificate

The complete raw certificate details for ctxasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIRAPkv889bydPSBUFJRaF2zaQwDQYJKoZIhvcNAQELBQAw
gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
Q0EwHhcNMTgwMjIwMDAwMDAwWhcNMTkwMjIwMjM1OTU5WjBPMSEwHwYDVQQLExhE
b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMRQw
EgYDVQQDEwtjdHhhc2lhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAOoWA3y7rHHPODN9O8O5D+566UKw40+BJjAyerH/nGGqG0lZiHOjdMmjZVkU
5QIj/krlS0o7LtjR3fWWkDjDpTE35dZWmgvgWkvBUtmWKfMi6QN3Y1a5GRj5gRHk
jF99lQOKCX7mwXdlEvo3I87uucUz1BC0JoYXn+NCye28K/C2oCQgJqhSTKkgAocC
Z7R1g2gCwDTNnkgqzfKPqqSNz6hoJfmBJimJIWlapJloR1LkK4efC0BA68jcQ4bz
uKsqbdASWRJ37W9OSEVQ1RYIVfCxToz7r2QcevIMDhbEagB04AvTOFNh2sdqjCRh
am9VxkV/TzSeGWKPRYGT+zuLPXh/gMdmumqn5TyMy/xsf46f6QqLvFb5sKM1OfrR
GEQM/9Dw9CcJKdVO6sLSKwsT785tHYPlh3aQ+esb+tWd9xcMSu1VCtQBv8GbVH58
OZH5fbseLw6WDEjPHjJTNa1p4wXufkJgQWDTIO+fhLc98Qsrrz0I64UEQK+piGDJ
JBn+0o2n5+YqtRoFCoAN9eJ2c8IhvlQ1O6ma2YeflDf9NnEPKkyFZRA/y+yOPV1g
6Wx+VtWMgBbq/Yn1OLwnCEprCgC78mzbhrHob/klDi9gPlVE+ro4LvZEAsWH3BjK
98BkLGGM2qtdyCak9A2iUy9ku3PTbMq/EgQc6NX35/y285EzAgMBAAGjggHZMIIB
1TAfBgNVHSMEGDAWgBSQr2o6lFoL2JDqElZz30O0Oija5zAdBgNVHQ4EFgQU65zq
78+HWCjmMs6F7xokRB9OlbcwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCME8GA1UdIARIMEYwOgYLKwYB
BAGyMQECAgcwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLmNv
bS9DUFMwCAYGZ4EMAQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuY29t
b2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD
QS5jcmwwgYUGCCsGAQUFBwEBBHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5j
b21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZl
ckNBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMCcG
A1UdEQQgMB6CC2N0eGFzaWEuY29tgg93d3cuY3R4YXNpYS5jb20wDQYJKoZIhvcN
AQELBQADggEBACPlXlI2VDX2TME11t9gcybfWqvUxjT2iKqcudhFIZyRRibD9t8l
0riCvJs4aYmqG1GZq1hVEQDDLwkj4gxU3+oa8B0A79nEr3eUA2F6uw1WQrJUSa1z
8qsWHkqGaZBMXPFcv5sGr9tJV2FYeMc8hMDsS/zwyLjLbTG10MrMJHCUsy7qhUpg
cQpgvqbXMh0b0UEtoXYirnZjDPPDf//8BVd764t5G7e50HKC7afho6TsL5vJ1tyC
FGs3xKpOS4WbNil0WLTvzIa3cFZ33+wDW0I0wI05G82q/iDhHlhEjCJiVujMdT6p
XMQcmAACLY03gs5qUaupKvYuzitUkKDIqj8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331226753956965647337227539482242633124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctxasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954987523410906056564281976717837629731400214391916017933470775195665804923230213618043798091231378579280726663360857691113467958241128218563294462587184334212084500511936946158430888416768946835335873434178282917161250799768044996767555404871956138444541334966003452060725696106340507454132611477991020666153089556317073121561674525906854876280187005748788925601791533913861205975699925737894528316024395730707785815325372865875891182438481559297619400894806717180640599829158650424198278410212864690765986822899001129701380072643773411625140094693381273237636911576123909849371910159819885720252682423592449865561809796450053967052617358582364463243469388815197136408101803947324269190322019128948619910435765047643619365323172145891893667087698959656867144848702994244147787624168728056769518336188884749129053164752427069513765132594905606724693409452711791210075636172664595548953842522343250202137677282896344767958107898462362570871426954142894626531736540695612480880556796716601555288109069852222139099241712718942991951636051709861933601253536106971491677175733615140616126243614005372651171530859384576629377761423217896902214692206277508740823957609913061928140143153430500065356184117477141174342634613768399136457199923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb9ceaefcf875828e632ce85ef1a24441f4e95b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctxasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctxasia.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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