*.bbrook.org
Issued by EssentialSSL CA
About this certificate
This digital certificate with serial number dc:f6:72:81:ee:02:20:18:d3:e7:c1:b5:ee:f1:4d:cc was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
Certificate Subject
CN=*.bbrook.org,OU=Domain Control Validated+OU=EssentialSSL Wildcard
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): dc:f6:72:81:ee:02:20:18:d3:e7:c1:b5:ee:f1:4d:ccSerial Number (int): 293709786588668842028821986173768519116
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 40:bf:ed:9e:6a:eb:37:87:3f:9f:ee:79:b2:ef:59:3b:4e:3f:35:2f
AuthorityKeyId: da:cb:ea:ad:5b:08:5d:cc:ff:fc:26:54:ce:49:e5:55:c6:38:f4:f8
Fingerprint (sha1): 5e:c5:a5:42:87:5b:3f:0c:01:e0:32:00:5c:7c:3e:ae:23:89:5d:4d
Fingerprint (sha256): 86:6a:bf:de:93:f9:41:f1:a4:bf:53:f5:a8:bc:cf:37:a3:d2:ef:7a:84:bd:15:58:d0:9f:fc:4c:97:d2:d3:3d
Issuing Certificate URL: http://crt.comodoca.com/EssentialSSLCA_2.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/EssentialSSLCA.crl
Check the revocation status for certificate *.bbrook.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bbrook.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bbrook.org
bbrook.org
bbrook.org
Other certificates including the domain name bbrook.org
(limited to 100 certificates)
ms.bsd29j.com
admin.adultlearning.sunrisesd.ca
admin.aes.fentressboe.com
www.cranburyschool.org
admin.bbcms.bbrook.org
admin.adultlearning.sunrisesd.ca
admin.hs.wvsd208.org
admin.adultlearning.sunrisesd.ca
glenknoll.org
*.bbrook.org
admin.saspasadena.com
ashlandcityccs.net
www.bronxdalehs.org
www.healthystartacademy.com
ps.bsd29j.com
admin.bbhs.bbrook.org
debusk.greenek12.org
hhs.hattiesburgpsd.com
admin.adultlearning.sunrisesd.ca
woodsboro.pylusd.org
www.holynamesf.com
admin.ashlandcityccs.net
mail.bbrook.org
*.bbrook.org
admin.bbhs.bbrook.org
mail.bbrook.org
*.bbrook.org
summer.materdeicatholic.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
bbel.bbrook.org
admin.adultlearning.sunrisesd.ca
*.bbrook.org
www.grandcenterartsacademy.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
balloustay.com
nphs.bpusd.net
lacountycharterselpa.org
admin.adultlearning.sunrisesd.ca
www.colegioangloamericanohgo.edu.mx
www.bbrook.org
admin.glenknoll.org
admin.jh.iasd.cc
*.bbrook.org
preschool.shelbycs.org
msdurham.org
admin.arcataschooldistrict.org
admin.foundation.shelbycs.org
healthystartacademy.com
sachs.org
www.healthystartacademy.org
admin.arcataschooldistrict.org
mail.bbrook.org
bcsdk12.org
admin.aes.lammersvilleschooldistrict.net
*.bbrook.org
sainte-school.org
admin.adultlearning.sunrisesd.ca
admin.ike.iasd.cc
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
*.bbrook.org
admin.arcataschooldistrict.org
bronxdalehs.org
cranburyschool.org
flacsms.flacsnyc.com
www.afsenyc.org
admin.kauffmanschool.org
*.bbrook.org
sh.iasd.cc
www.lacountycharterselpa.org
*.bbrook.org
grandcenterartsacademy.org
admin.ces.shelbycs.org
admin.bbhs.bbrook.org
www.sainte-school.org
colonies.sunrisesd.ca
admin.bronxdalehs.org
admin.mhs.molineschools.org
admin.anola.sunrisesd.ca
www.bsd29j.com
admin.bbel.bbrook.org
admin.adultlearning.sunrisesd.ca
*.bbrook.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
mhs.molineschools.org
admin.chuckey.greenek12.org
admin.sainte-school.org
bbcms.bbrook.org
cm.dekalbcentral.net
admin.bpusd.net
admin.houstonelem.net
admin.afsenyc.org
admin.annaleeelementaryandsteammagnet.org
admin.bereanchristian.com
admin.afsenyc.org
www.bbrook.org
admin.adultlearning.sunrisesd.ca
admin.aes.fentressboe.com
www.cranburyschool.org
admin.bbcms.bbrook.org
admin.adultlearning.sunrisesd.ca
admin.hs.wvsd208.org
admin.adultlearning.sunrisesd.ca
glenknoll.org
*.bbrook.org
admin.saspasadena.com
ashlandcityccs.net
www.bronxdalehs.org
www.healthystartacademy.com
ps.bsd29j.com
admin.bbhs.bbrook.org
debusk.greenek12.org
hhs.hattiesburgpsd.com
admin.adultlearning.sunrisesd.ca
woodsboro.pylusd.org
www.holynamesf.com
admin.ashlandcityccs.net
mail.bbrook.org
*.bbrook.org
admin.bbhs.bbrook.org
mail.bbrook.org
*.bbrook.org
summer.materdeicatholic.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
bbel.bbrook.org
admin.adultlearning.sunrisesd.ca
*.bbrook.org
www.grandcenterartsacademy.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
balloustay.com
nphs.bpusd.net
lacountycharterselpa.org
admin.adultlearning.sunrisesd.ca
www.colegioangloamericanohgo.edu.mx
www.bbrook.org
admin.glenknoll.org
admin.jh.iasd.cc
*.bbrook.org
preschool.shelbycs.org
msdurham.org
admin.arcataschooldistrict.org
admin.foundation.shelbycs.org
healthystartacademy.com
sachs.org
www.healthystartacademy.org
admin.arcataschooldistrict.org
mail.bbrook.org
bcsdk12.org
admin.aes.lammersvilleschooldistrict.net
*.bbrook.org
sainte-school.org
admin.adultlearning.sunrisesd.ca
admin.ike.iasd.cc
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
*.bbrook.org
admin.arcataschooldistrict.org
bronxdalehs.org
cranburyschool.org
flacsms.flacsnyc.com
www.afsenyc.org
admin.kauffmanschool.org
*.bbrook.org
sh.iasd.cc
www.lacountycharterselpa.org
*.bbrook.org
grandcenterartsacademy.org
admin.ces.shelbycs.org
admin.bbhs.bbrook.org
www.sainte-school.org
colonies.sunrisesd.ca
admin.bronxdalehs.org
admin.mhs.molineschools.org
admin.anola.sunrisesd.ca
www.bsd29j.com
admin.bbel.bbrook.org
admin.adultlearning.sunrisesd.ca
*.bbrook.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
mhs.molineschools.org
admin.chuckey.greenek12.org
admin.sainte-school.org
bbcms.bbrook.org
cm.dekalbcentral.net
admin.bpusd.net
admin.houstonelem.net
admin.afsenyc.org
admin.annaleeelementaryandsteammagnet.org
admin.bereanchristian.com
admin.afsenyc.org
www.bbrook.org
Certificate
The complete raw certificate details for *.bbrook.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIRANz2coHuAiAY0+fBte7xTcwwDQYJKoZIhvcNAQEFBQAw cjELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxGDAWBgNV BAMTD0Vzc2VudGlhbFNTTCBDQTAeFw0xNDA3MTUwMDAwMDBaFw0xNzA3MTQyMzU5 NTlaMFoxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEeMBwGA1UE CxMVRXNzZW50aWFsU1NMIFdpbGRjYXJkMRUwEwYDVQQDFAwqLmJicm9vay5vcmcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8WYyxNWbl9u0Nmg/ajtWG YUkFWLSPmDPbU4tTVP8ytlMKj7xLaH7V0hmGjH1hr60j5ux+2785ga9pM2dozOkP Z6ROok7qPSpF2b9WSifOd341XKLLJzdZTmo+d6YeDzjRJRAb10MuxC42K13tGysv YIwe4DRpQ9FIZ5AAolzPgxqSW6WiPLyQsEWayMF5koCQesO3BBZLyomhOiR0MsGT O4QnlshWEhcajyvtQiH4rBYU18txnwtO/njRkaPZD+TiVLoLc6Luc1v3S/B9RWZx 8H4VP0LtZcFPww9se6Fn/XlOPdSMtSnSJkHfFZzbrYn3kTgyw4IKe2bcnfi3dIxb AgMBAAGjggG7MIIBtzAfBgNVHSMEGDAWgBTay+qtWwhdzP/8JlTOSeVVxjj0+DAd BgNVHQ4EFgQUQL/tnmrrN4c/n+55su9ZO04/NS8wDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwNAYDVR0lBC0wKwYIKwYBBQUHAwEGCCsGAQUFBwMCBgorBgEE AYI3CgMDBglghkgBhvhCBAEwTwYDVR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkG CCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwB AgEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5jb21vZG9jYS5jb20vRXNz ZW50aWFsU1NMQ0EuY3JsMG4GCCsGAQUFBwEBBGIwYDA4BggrBgEFBQcwAoYsaHR0 cDovL2NydC5jb21vZG9jYS5jb20vRXNzZW50aWFsU1NMQ0FfMi5jcnQwJAYIKwYB BQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAjBgNVHREEHDAaggwqLmJi cm9vay5vcmeCCmJicm9vay5vcmcwDQYJKoZIhvcNAQEFBQADggEBAFYajzDx4ORZ 8BDkgFHJ1UP4RDKwafNIO2Otyjn4dBqma5e20X1mgb734IgKKUX0tZO6IVDwzf9r T9StekT/nakTBUJaXTNx2qyYpyGBvSrYyDsa0Ot3vxtEpn5OYm0/HJlw5zKgWLxc 0Kb2pmB/wQM0inyNU25NWAzy0O6UkOKRLN0ZDPkgHa7wWYHndnCd4sKqh39SEbCA qKELP3333Yjrs0PJ3jrGGPaZZoQ75V2KfZRotrljWGJrYmRxUKhMhccTiK5tUDhD shfgwFp0atw+8tYWDDNsJQG/S7eia3DSIVuiBckZd9Gd6fDJKkBkExTTEBkQa3Tn I85NSEaNWoA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FmMsTVm5fbtDZoP2o7V hmFJBVi0j5gz21OLU1T/MrZTCo+8S2h+1dIZhox9Ya+tI+bsftu/OYGvaTNnaMzp D2ekTqJO6j0qRdm/Vkonznd+NVyiyyc3WU5qPnemHg840SUQG9dDLsQuNitd7Rsr L2CMHuA0aUPRSGeQAKJcz4Maklulojy8kLBFmsjBeZKAkHrDtwQWS8qJoTokdDLB kzuEJ5bIVhIXGo8r7UIh+KwWFNfLcZ8LTv540ZGj2Q/k4lS6C3Oi7nNb90vwfUVm cfB+FT9C7WXBT8MPbHuhZ/15Tj3UjLUp0iZB3xWc262J95E4MsOCCntm3J34t3SM WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293709786588668842028821986173768519116 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL Wildcard' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.bbrook.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31856211394657529220548660296524090171318882393331641300336066651376464783661334129890311871488250160941242924083499453184901374717947510070320422196520407805987304191180384803333576928636562535152777478985741702244293939366946877187429748591831913996984039965263074550716252124873199751160438633900359861705463531356749334915824673324267423488787932477125569173429981850152219637123429958147696479706869291772879211092719394847470977990454034781246671752336844244965429880830283838605116606471797151784330074072822995546341890758051984460153632484675211777148524807127558172353090210403660568162919627446729280097371 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dacbeaad5b085dccfffc2654ce49e555c638f4f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 40bfed9e6aeb37873f9fee79b2ef593b4e3f352f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/EssentialSSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/EssentialSSLCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbrook.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbrook.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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