www.abem.org

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 2c:42:9f:16:59:b3:29:ef was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.abem.org

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:42:9f:16:59:b3:29:ef
Serial Number (int): 3189286404474743279
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 1f:c7:a1:7a:c5:4f:8c:0a:4c:a5:8e:96:e1:2f:b9:e1:cc:c2:be:13
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 4b:b4:1f:6c:26:b7:c4:e7:f9:5e:c1:38:cd:9e:42:11:14:cc:6d:c5
Fingerprint (sha256): 79:0a:71:ec:c5:0a:ef:69:64:d5:36:59:c7:98:44:48:ac:18:a3:54:6d:19:62:fd:3b:5e:f3:7d:90:ea:75:ac

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-496.crl

Check the revocation status for certificate www.abem.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.abem.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.abem.org
abem.org

Other certificates including the domain name abem.org

(limited to 100 certificates)
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
abemcertified.abem.org
badges.gmac.com
badges.gmac.com
cases-prod.abem.org
www.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
badges.gmac.com
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
beta.abem.org
abemcertified.abem.org
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
abemcertified.abem.org
abemcertified.abem.org
staging.abem.org
badges.gmac.com
mail.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
badges.cesarritzcolleges.edu
abemcertified.abem.org
badges.gmac.com
mail.abem.org
www.abem.org
badges.gmac.com
abemcertified.abem.org
ibstage.abem.org
www.abem.org
mail.abem.org
abemcertified.abem.org
badges.gmac.com
abemcertified.abem.org
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
sfstage.abem.org
abemcertified.abem.org
cases-prod.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
mail.abem.org
badges.cesarritzcolleges.edu
staging.abem.org
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
sfstage.abem.org
cases-prod.abem.org
staging.abem.org
ibprod.abem.org
www.abem.org
cases-prod.abem.org
abemcertified.abem.org
vpn.abem.org
alpha1.abem.org
badges.gmac.com
sfstage.abem.org
badges.cesarritzcolleges.edu
abemcertified.abem.org
badges.cesarritzcolleges.edu
www.abem.org
abemcertified.abem.org
www.abem.org
abemcertified.abem.org
abemcertified.abem.org
IBStage.abem.org
alpha1.abem.org
badges.cesarritzcolleges.edu
abemcertified.abem.org
mail.abem.org
badges.gmac.com
badges.gmac.com
mail.abem.org
IBProd.abem.org
cases-staging.abem.org
fs.abem.org
abemcertified.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
abemcertified.abem.org
badges.gmac.com
badges.cesarritzcolleges.edu
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
cases-prod.abem.org
cases-prod.abem.org
www.abem.org
abemcertified.abem.org

Certificate

The complete raw certificate details for www.abem.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHsTCCBpmgAwIBAgIILEKfFlmzKe8wDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw
IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo
dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV
BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw
HhcNMjIxMDE3MTQ1ODIyWhcNMjMxMDE5MTgwODEyWjAXMRUwEwYDVQQDEwx3d3cu
YWJlbS5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDpjzQAyhpf
gRZlAZow/NavhQoocGHgOsZqZ8kJQLn2VjMdHsmwRXFyicaE/i8m48iFZGkx2KS2
hmWKsI8BQesOk0tt5Rc3iAb/D9/ijp1zRvruNHKLnbD05noe/8OUgM2aL6x49R6o
+HIsSpNsrjlQePnXaeAbcFl7kYgt6OlJVxoCdNLUwsz/RAuku67re/6cqsOg1WXp
Zf3nQndRtsgatxpdDjcB0dLs8EEZ+YcAZv/u6CTJWUobF1TXBO8v/dzloMRu7uFp
lVsuntCYhWKQTWUWlZTIEkgJcqS9ueZCrUEo0pwGeca9Xm6OiFWxGBtHB6dDiaU8
bNJ1BHRYiLjsyV+6JaMIKQDxrtN0RCWJ1j6QdtuY+YbAHRpvcT9LXFUH24TDHdDg
qC55z1T0Duxfa8F670yyJOBbxnkBzbBgFng8ov46TWjk+ur30yYQ564vnlAVpBPb
UhJ7D6u0+Wl69K0kIgA3NcMe3VV8HJlR/J6Q942yjAewsjSlgS3pookJPE5PDkd9
vIzvuDJrWxTLb/A7Hcx4tc1YggKSkpZENTdu8iG1aDOKMophlGjNmKltr8piMbxd
yGGGgGIyhRKSfEqx66uRepsd91IusETqdpTppSuySAqaNYQ3OaiFbmbLtC3B81na
Z6kUTUTgTTXf3OlSgHT5tLmr5ll2ekIldwIDAQABo4IDTzCCA0swDAYDVR0TAQH/
BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQD
AgWgMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc3RhcmZpZWxkdGVjaC5j
b20vc2ZpZzJzMS00OTYuY3JsMGMGA1UdIARcMFowTgYLYIZIAYb9bgEHFwEwPzA9
BggrBgEFBQcCARYxaHR0cDovL2NlcnRpZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNv
bS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwgYIGCCsGAQUFBwEBBHYwdDAqBggrBgEF
BQcwAYYeaHR0cDovL29jc3Auc3RhcmZpZWxkdGVjaC5jb20vMEYGCCsGAQUFBzAC
hjpodHRwOi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRv
cnkvc2ZpZzIuY3J0MB8GA1UdIwQYMBaAFCVFgWhQJjg9Oy0svs1q2bY9s2ZjMCEG
A1UdEQQaMBiCDHd3dy5hYmVtLm9yZ4IIYWJlbS5vcmcwHQYDVR0OBBYEFB/HoXrF
T4wKTKWOluEvueHMwr4TMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDoPtDa
PvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYPmc/e8AAAEAwBHMEUCIQDV
k6dOkEan3QgJp/F61f+1arGYsrRGzoWjcjg9AV9XpwIgPXnw0Odd1hOFiVKcRSai
3Y8dER7xRANds5f9de4gV6gAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpX
o1LrUgAAAYPmc/i9AAAEAwBHMEUCIQCeG+0BeovIQbUxvplaTOJCfRHx2loJ2ZCS
BjG4LEGPjwIgXkpBs+xuojBqihyY7OokL6ThaNSLC9aMyH8mX9dnHdwAdgCzc3cH
4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYPmc/nUAAAEAwBHMEUCIQD+
2zfFKk8uW4qEbCGDc+SHPjvj34eBjHvcPpun8Md/eQIgcXHodd5lHgy8jdheYwUO
KfkhN+w0r9gVyzh60qjskUgwDQYJKoZIhvcNAQELBQADggEBAHnsHxMOSU7EeY1t
5ZFd8TMYo0GCT1LPJZecMxUE86DUZlDo1WF6uqt6Ct6psuE9ymeXXzUd9uPDJA9A
ROrkSGCkpjmvGKVTBoM8UYv+5XVhtEpVVcoj8rJ2h5bJ6wxGQqVwInxAGRgbnn1n
i7quv9uPuouYODf+tK0z4MkCla3CCOiklNMnyMjUXMkMbLfPXTTQ80UgxsFVD0mv
nfwfuBIEhSdNMrCkoyeDvjSGMPtSK/qnjMzx/wAmngf8+YYiujRu8N6vomx4KtlC
OBT5GbHtGxhLsLCWxiIvCKd9gH6KDKfNs3oNh/dMmSGLjoDuBB+PUgPpq3U0+C8f
jlTlH3c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3189286404474743279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-17 14:58:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 18:08:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.abem.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 952839168741551790053596942196954413623322417485614517277281254312286434422206401166606873203415413791210352772153262131913490504514916026913378112321015565476964726097679673203780756987112624206161725548377201364555518566006188187891534742559251939188331442588536430782246752457331848394930679592751515567096579532226195053469113323704387696364387480584039274504304389721600188175225891274096002635338695649550558811000930906455944698821268905767329489267697196224137686348734773176295321727383180220577949561424508329301165908276496421519550426161941643548733573808374079555338467210138862361164093310419576919708126134861616947930164571985428736201867394542537466993123561733545536567112958142453396303007341971673601650595480549629641298857408525329665685757195620426245801246301345444191056018781485344094015360608219263052922307004306280848905867856671040741450328528499636428563147827469958527092903813732993902540084340422743741883674653138805805582487471977596176439908507105433038498632826303846856315878880843598626385076092455730235537252987405913915079972299431490790497534780791751778340846947913438774067460490277452545881978064317500001431569475855056604548069448725647607277015480630595513691066125696036718254368119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-496.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abem.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fc7a17ac54f8c0a4ca58e96e12fb9e1ccc2be13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:15|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:18|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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