www.waelchli-web.ch
Issued by Hostpoint DV SSL CA - G2
About this certificate
This digital certificate with serial number 6c:e4:f2:13:d5:d0:e0:0e:a3:fe:a2:5f:18:c0:62:13 was issued on by Hostpoint AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.waelchli-web.ch
Hostpoint AG
Organization:
Hostpoint AG
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 6c:e4:f2:13:d5:d0:e0:0e:a3:fe:a2:5f:18:c0:62:13Serial Number (int): 144745377143148848190771108526252122643
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: b4:e3:2a:8e:85:bb:b2:b7:27:3c:e9:ce:9a:a0:80:6f:0a:4b:02:48
Fingerprint (sha1): 4e:9a:3b:b0:05:b5:2d:e0:a9:de:5b:66:02:4a:40:c7:a8:c9:c3:56
Fingerprint (sha256): 80:50:ce:f1:7d:ba:14:14:88:49:f3:62:50:6e:3c:37:7f:28:a9:43:bd:11:2e:25:99:b4:ff:33:f9:86:91:0a
Issuing Certificate URL: http://hostpoint-aia.digitalcertvalidation.com/hostpointg2.crt
Revocation information
OCSP Server: http://hostpoint-ocsp.digitalcertvalidation.comCRL Distribution Point: http://hostpoint-crl.digitalcertvalidation.com/hostpointg2.crl
Check the revocation status for certificate www.waelchli-web.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.waelchli-web.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.waelchli-web.ch
waelchli-web.ch
waelchli-web.ch
Other certificates including the domain name waelchli-web.ch
(limited to 100 certificates)
www.eishockey-archiv.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.waelchli-web.ch
eishockey.waelchli-web.ch
kiwanis.waelchli-web.ch
waelchli-web.ch
www.eishockey.waelchli-web.ch
waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
waelchli-web.ch
eishockey.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
eishockey.waelchli-web.ch
kiwanis.waelchli-web.ch
www.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
waelchli-web.ch
eishockey.waelchli-web.ch
eishockey-archiv.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
waelchli-web.ch
www.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
eishockey.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.kiwanis.waelchli-web.ch
kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
waelchli-web.ch
kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.waelchli-web.ch
eishockey.waelchli-web.ch
eishockey.waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey.waelchli-web.ch
waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.waelchli-web.ch
waelchli-web.ch
kiwanis.waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
kiwanis.waelchli-web.ch
waelchli-web.ch
www.kiwanis.waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
eishockey.waelchli-web.ch
maroc-2011.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.eishockey.waelchli-web.ch
eishockey.waelchli-web.ch
waelchli-web.ch
eishockey.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
eishockey.waelchli-web.ch
eishockey.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
maroc-2011.waelchli-web.ch
www.waelchli-web.ch
waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
eishockey.waelchli-web.ch
www.eishockey.waelchli-web.ch
waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.waelchli-web.ch
eishockey.waelchli-web.ch
kiwanis.waelchli-web.ch
waelchli-web.ch
www.eishockey.waelchli-web.ch
waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
waelchli-web.ch
eishockey.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
eishockey.waelchli-web.ch
kiwanis.waelchli-web.ch
www.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
waelchli-web.ch
eishockey.waelchli-web.ch
eishockey-archiv.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
waelchli-web.ch
www.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
eishockey.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.kiwanis.waelchli-web.ch
kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.kiwanis.waelchli-web.ch
waelchli-web.ch
kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.waelchli-web.ch
eishockey.waelchli-web.ch
eishockey.waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey.waelchli-web.ch
waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.kiwanis.waelchli-web.ch
www.waelchli-web.ch
waelchli-web.ch
kiwanis.waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.eishockey.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
kiwanis.waelchli-web.ch
waelchli-web.ch
www.kiwanis.waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
kiwanis.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
eishockey.waelchli-web.ch
maroc-2011.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.eishockey.waelchli-web.ch
eishockey.waelchli-web.ch
waelchli-web.ch
eishockey.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
eishockey.waelchli-web.ch
eishockey.waelchli-web.ch
www.maroc-2011.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
maroc-2011.waelchli-web.ch
www.waelchli-web.ch
waelchli-web.ch
kiwanis.waelchli-web.ch
www.eishockey-archiv.waelchli-web.ch
eishockey.waelchli-web.ch
www.eishockey.waelchli-web.ch
waelchli-web.ch
Certificate
The complete raw certificate details for www.waelchli-web.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIQbOTyE9XQ4A6j/qJfGMBiEzANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMSG9zdHBvaW50IEFHMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEhMB8GA1UEAxMYSG9zdHBvaW50IERWIFNTTCBD QSAtIEcyMB4XDTE2MDYwNzAwMDAwMFoXDTE3MDYwNzIzNTk1OVowHjEcMBoGA1UE AwwTd3d3LndhZWxjaGxpLXdlYi5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANas5RC4lzhh+VWaLMfOP24UmJCcZldGbUz4/c66TSE6HQAO9jP6YeWw LQhCIf36CPjS529ioLGnHdHP4vQ5k3CXXXYe2qteO3wRfB7YIiEDKb+RoNJpYWo4 sfuK2EUTwwl5w8fyoidQlWN3+LVY3EegA0HQ43HIAPKRUdI2o2u3yS0uTtdhgfel 4eMI15DGBZ35F1I5d9EQb8NITqNVnLhAMF9EfWVSL/6qqJrea8pz8LIQDbCMZqrD FIcviWgtc8vEURDEIVlGqhFd0D8kGBZ411hbsF/U5q5ig4nPsmXHOubud5Vav8fF r0BSKFXBeMW1S8w9xUWtDLa+PLqribUCAwEAAaOCAjIwggIuMC8GA1UdEQQoMCaC E3d3dy53YWVsY2hsaS13ZWIuY2iCD3dhZWxjaGxpLXdlYi5jaDAJBgNVHRMEAjAA ME8GA1UdHwRIMEYwRKBCoECGPmh0dHA6Ly9ob3N0cG9pbnQtY3JsLmRpZ2l0YWxj ZXJ0dmFsaWRhdGlvbi5jb20vaG9zdHBvaW50ZzIuY3JsMIGdBgNVHSAEgZUwgZIw gY8GBmeBDAECATCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3Qu Y29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0 dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdh bDAfBgNVHSMEGDAWgBS04yqOhbuytyc86c6aoIBvCksCSDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGZBggrBgEFBQcBAQSB jDCBiTA7BggrBgEFBQcwAYYvaHR0cDovL2hvc3Rwb2ludC1vY3NwLmRpZ2l0YWxj ZXJ0dmFsaWRhdGlvbi5jb20wSgYIKwYBBQUHMAKGPmh0dHA6Ly9ob3N0cG9pbnQt YWlhLmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5jb20vaG9zdHBvaW50ZzIuY3J0MBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA86zTJ/w85fX7m qBzlG0poW0z7H8RzBOifUoBF8EfSvCElGgBrtBRB6oW9QxFO8vbsl+PQ0cXSrG5r OAxgeDKxFRPRhykS/U5PDOlmnnlZbPRKypndo+oH26JL8teX3DVrXAmBVZ7Y5Lya oNlOWOjrXFvDeMFEh6OSajxK0Mk7JO7qFrVoX9bPzkYtVYHakQPegsIoENGk8n32 aEuDv4/fESFZDxgKWttXgKiQ/8lSt2rZ+m9UzsQ3N2dojCpw5IYfBW3RLT320M7R wjcAnXAFJG//sumYbxdKJ4f0VsDWG7eF+5w5MNlAMpP7zGHFbkffwEoKwP6y+8pP yMs8H8fJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qzlELiXOGH5VZosx84/ bhSYkJxmV0ZtTPj9zrpNITodAA72M/ph5bAtCEIh/foI+NLnb2Kgsacd0c/i9DmT cJdddh7aq147fBF8HtgiIQMpv5Gg0mlhajix+4rYRRPDCXnDx/KiJ1CVY3f4tVjc R6ADQdDjccgA8pFR0jaja7fJLS5O12GB96Xh4wjXkMYFnfkXUjl30RBvw0hOo1Wc uEAwX0R9ZVIv/qqomt5rynPwshANsIxmqsMUhy+JaC1zy8RREMQhWUaqEV3QPyQY FnjXWFuwX9TmrmKDic+yZcc65u53lVq/x8WvQFIoVcF4xbVLzD3FRa0Mtr48uquJ tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 144745377143148848190771108526252122643 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hostpoint AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hostpoint DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.waelchli-web.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27100254859501124263941741539030195493440086714868929295578973192912012876890463690935234968258700278026046287325492604886468130982283795421511936571289813043652674575009491418198050151433589633693453589573681218629078584056594943733469325650070313867933781616432500180635871432323727237647766675544429839440199976823869870198653974723705043385664282983212344482449668680504661009270663615117396204617635117735687891259928345116409972260913240416352365938173826312034170060685519326254763033151666579488228291625459971051399242500555684952626442878563846512669641117786844691162775036589988115997235575587852172102069 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waelchli-web.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waelchli-web.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hostpoint-crl.digitalcertvalidation.com/hostpointg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b4e32a8e85bbb2b7273ce9ce9aa0806f0a4b0248 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hostpoint-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hostpoint-aia.digitalcertvalidation.com/hostpointg2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003ceb34c9ff0f397d7ee6a81ce51b4a685b4cfb1fc47304e89f528045f047d2bc21251a006bb41441ea85bd43114ef2f6ec97e3d0d1c5d2ac6e6b380c607832b11513d1872912fd4e4f0ce9669e79596cf44aca99dda3ea07dba24bf2d797dc356b5c0981559ed8e4bc9aa0d94e58e8eb5c5bc378c14487a3926a3c4ad0c93b24eeea16b5685fd6cfce462d5581da9103de82c22810d1a4f27df6684b83bf8fdf1121590f180a5adb5780a890ffc952b76ad9fa6f54cec4373767688c2a70e4861f056dd12d3df6d0ced1c237009d7005246fffb2e9986f174a2787f456c0d61bb785fb9c3930d9403293fbcc61c56e47dfc04a0ac0feb2fbca4fc8cb3c1fc7c9