osaka.dcmusic.ca
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 5f:67:e0:cd:a1:1c:f0:f0:9b:7b:f9:c7:c9:23:a1:2f was issued on by SSL Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=osaka.dcmusic.ca
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 5f:67:e0:cd:a1:1c:f0:f0:9b:7b:f9:c7:c9:23:a1:2fSerial Number (int): 126816025727382702880528537930548093231
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: f6:a9:f0:32:6d:0d:8d:a6:11:f4:2d:0c:7b:46:db:8e:80:cc:4e:23
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): 52:67:cd:68:0e:0e:30:47:c5:7f:61:ee:57:b7:71:20:8c:24:d8:a7
Fingerprint (sha256): 8c:02:1b:22:38:10:82:1f:eb:68:83:1e:55:3e:10:8c:c1:12:82:b5:af:06:ed:f0:cc:0c:ae:04:86:50:4d:7e
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate osaka.dcmusic.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for osaka.dcmusic.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
osaka.dcmusic.ca
Other certificates including the domain name dcmusic.ca
(limited to 100 certificates)
virgrinia.dcmusic.ca
lgeguhr.dcmusic.ca
rnmuo.dcmusic.ca
vxweo.dcmusic.ca
ramlas.dcmusic.ca
milki.dcmusic.ca
ladudleya.dcmusic.ca
bwida.dcmusic.ca
fuethy.dcmusic.ca
bigeva.dcmusic.ca
camarmarotha.dcmusic.ca
lfyxdht.dcmusic.ca
arulna.dcmusic.ca
vecom.dcmusic.ca
asocv.dcmusic.ca
lzlq.dcmusic.ca
takrank.dcmusic.ca
ljxtx.dcmusic.ca
kupinglowo.dcmusic.ca
lbxh.dcmusic.ca
imperva.com
clambrighte.dcmusic.ca
mdkr.dcmusic.ca
gntlamlm.dcmusic.ca
tiagorosado.dcmusic.ca
indigf.dcmusic.ca
usfhn.dcmusic.ca
gimlgnn.dcmusic.ca
ramon.dcmusic.ca
holoda.dcmusic.ca
rmsinim.dcmusic.ca
brownse.dcmusic.ca
chsung.dcmusic.ca
bagar.dcmusic.ca
gamersony.dcmusic.ca
hjyoi.dcmusic.ca
hazbig.dcmusic.ca
rtozza.dcmusic.ca
meden.dcmusic.ca
ovml.dcmusic.ca
retainedrecruiters.dcmusic.ca
snkg.dcmusic.ca
ownh.dcmusic.ca
bvdte.dcmusic.ca
deepeastmotorsports.dcmusic.ca
naas.dcmusic.ca
bihiorneira.dcmusic.ca
ekfn.dcmusic.ca
ovqu.dcmusic.ca
marilyn.dcmusic.ca
kgfh.dcmusic.ca
lodinsa.dcmusic.ca
lucas.dcmusic.ca
floreds.dcmusic.ca
zjipz.dcmusic.ca
hihhfp.dcmusic.ca
euqa.dcmusic.ca
rkcho.dcmusic.ca
agunlu.dcmusic.ca
ebuhealth.dcmusic.ca
sadirin.dcmusic.ca
sotong.dcmusic.ca
gzody.dcmusic.ca
ossborne.dcmusic.ca
dcmusic.ca
cintial.dcmusic.ca
kudahorse.dcmusic.ca
vlyi.dcmusic.ca
william.dcmusic.ca
mbusut.dcmusic.ca
thomastun.dcmusic.ca
babscock.dcmusic.ca
cabinh.dcmusic.ca
dankr.dcmusic.ca
jit.dcmusic.ca
axwrh.dcmusic.ca
lengo.dcmusic.ca
gmpo.dcmusic.ca
maggellan.dcmusic.ca
cugyv.dcmusic.ca
vouvray.dcmusic.ca
bigperrysale.dcmusic.ca
lhpu.dcmusic.ca
fvks.dcmusic.ca
rpnlihi.dcmusic.ca
ajoseph.dcmusic.ca
fmmb.dcmusic.ca
fpqo.dcmusic.ca
vivyian.dcmusic.ca
planclothing.dcmusic.ca
dcmusic.ca
biduj.dcmusic.ca
kobvin.dcmusic.ca
dgabv.dcmusic.ca
pivirgili.dcmusic.ca
saxo.dcmusic.ca
hajime.dcmusic.ca
sjkr.dcmusic.ca
yarbro.dcmusic.ca
krliga.dcmusic.ca
lgeguhr.dcmusic.ca
rnmuo.dcmusic.ca
vxweo.dcmusic.ca
ramlas.dcmusic.ca
milki.dcmusic.ca
ladudleya.dcmusic.ca
bwida.dcmusic.ca
fuethy.dcmusic.ca
bigeva.dcmusic.ca
camarmarotha.dcmusic.ca
lfyxdht.dcmusic.ca
arulna.dcmusic.ca
vecom.dcmusic.ca
asocv.dcmusic.ca
lzlq.dcmusic.ca
takrank.dcmusic.ca
ljxtx.dcmusic.ca
kupinglowo.dcmusic.ca
lbxh.dcmusic.ca
imperva.com
clambrighte.dcmusic.ca
mdkr.dcmusic.ca
gntlamlm.dcmusic.ca
tiagorosado.dcmusic.ca
indigf.dcmusic.ca
usfhn.dcmusic.ca
gimlgnn.dcmusic.ca
ramon.dcmusic.ca
holoda.dcmusic.ca
rmsinim.dcmusic.ca
brownse.dcmusic.ca
chsung.dcmusic.ca
bagar.dcmusic.ca
gamersony.dcmusic.ca
hjyoi.dcmusic.ca
hazbig.dcmusic.ca
rtozza.dcmusic.ca
meden.dcmusic.ca
ovml.dcmusic.ca
retainedrecruiters.dcmusic.ca
snkg.dcmusic.ca
ownh.dcmusic.ca
bvdte.dcmusic.ca
deepeastmotorsports.dcmusic.ca
naas.dcmusic.ca
bihiorneira.dcmusic.ca
ekfn.dcmusic.ca
ovqu.dcmusic.ca
marilyn.dcmusic.ca
kgfh.dcmusic.ca
lodinsa.dcmusic.ca
lucas.dcmusic.ca
floreds.dcmusic.ca
zjipz.dcmusic.ca
hihhfp.dcmusic.ca
euqa.dcmusic.ca
rkcho.dcmusic.ca
agunlu.dcmusic.ca
ebuhealth.dcmusic.ca
sadirin.dcmusic.ca
sotong.dcmusic.ca
gzody.dcmusic.ca
ossborne.dcmusic.ca
dcmusic.ca
cintial.dcmusic.ca
kudahorse.dcmusic.ca
vlyi.dcmusic.ca
william.dcmusic.ca
mbusut.dcmusic.ca
thomastun.dcmusic.ca
babscock.dcmusic.ca
cabinh.dcmusic.ca
dankr.dcmusic.ca
jit.dcmusic.ca
axwrh.dcmusic.ca
lengo.dcmusic.ca
gmpo.dcmusic.ca
maggellan.dcmusic.ca
cugyv.dcmusic.ca
vouvray.dcmusic.ca
bigperrysale.dcmusic.ca
lhpu.dcmusic.ca
fvks.dcmusic.ca
rpnlihi.dcmusic.ca
ajoseph.dcmusic.ca
fmmb.dcmusic.ca
fpqo.dcmusic.ca
vivyian.dcmusic.ca
planclothing.dcmusic.ca
dcmusic.ca
biduj.dcmusic.ca
kobvin.dcmusic.ca
dgabv.dcmusic.ca
pivirgili.dcmusic.ca
saxo.dcmusic.ca
hajime.dcmusic.ca
sjkr.dcmusic.ca
yarbro.dcmusic.ca
krliga.dcmusic.ca
Certificate
The complete raw certificate details for osaka.dcmusic.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0TCCA7mgAwIBAgIQX2fgzaEc8PCbe/nHySOhLzANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTIyMTIyMjA5NTcwOVoXDTIzMDQwNTA5NTY1NVowGzEZMBcG A1UEAwwQb3Nha2EuZGNtdXNpYy5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALYMpwtl6AGtWBjVkpFdFheYrNhn62tlPpia6TJbMV9HKwTK4IhM7aTV xOTjuiUp1WUAXJp8PG6xjVUsbiQrQ7/yQHf0QLSBBetp2z8QdyssWAQtsN+TTqgr nbx8mo89ubQz5C6/WBCRU9HjcJv5iQJeEZBsyOcpqUPOEr651xCjGqHJ1kLB5xxQ N4Ug0TctoKYtloUvpvLZG1Mas4KBWlnzdCX44xqS6cw7CVfYIGZ7A6F18Wa1N7fa /AFuKUKrITJzLRZIkfVV3wzWvu7aJFAf1PcyjiPn4AwHmpAa5MxGzPC3BQSSm3gM 63eAXz7BPN4geOfwFPtHaxYXsGaqRqUCAwEAAaOCAcEwggG9MAwGA1UdEwEB/wQC MAAwHwYDVR0jBBgwFoAUJhR+4NzXpvfi1AQn32HxwuznMsowcgYIKwYBBQUHAQEE ZjBkMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydC5zc2wuY29tL1NTTGNvbS1TdWJD QS1TU0wtUlNBLTQwOTYtUjEuY2VyMCAGCCsGAQUFBzABhhRodHRwOi8vb2NzcHMu c3NsLmNvbTAbBgNVHREEFDASghBvc2FrYS5kY211c2ljLmNhMFEGA1UdIARKMEgw CAYGZ4EMAQIBMDwGDCsGAQQBgqkwAQMBATAsMCoGCCsGAQUFBwIBFh5odHRwczov L3d3dy5zc2wuY29tL3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG AQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmxzLnNzbC5jb20vU1NM Y29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwHQYDVR0OBBYEFPap8DJtDY2m EfQtDHtG246AzE4jMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAgEACDad+6ROv2XTc851wh2+b4/eJwjxAlx95JCm FVwWNIN7xiXsHsvEt/lauOZuA6sSF6enK0kI2kCeoEYetkm1PLvUtWtB1cbRf6e5 mFgsknORhtB1C7Sh+5cLZ6t/67r1MqK19Acox2PwFfsUp3va1nSlguyfxmLw/AUZ uRSFO1JgTusY6V9nJDAcMmODNFgQGxPRrMFBCMT93AnfrMSo9xwH7Gnr0foUJWl5 T8SQc4/uE3uIBo4R0wTBqf94vuHV32CRtFVmQ/+FQlZ4PJ42ejWUfTeMI5LTLKkJ MFPHQ5tCdbw0rfaLlsuoePKm5sljSNV98C0hU8jPCti3VICHrlYvoAw/SxxJVcYW V/+vHwgEXXUe3JkXzjbuJUaRxmu0u+yjsDO+kRfsAqm+GAeecqGAqHokX5VjZsPE WKxC9s6iaCLz5ZWqEWjLi+lr+hyW7M6NGAKwrMZZTOpW0k9MrlY2fa3Un84jSaI3 k7n2GI4ejNlQ9j1lFFS0FGoub3wdSvfiMzFBiPcEbgFcTYRbEAuBjq8EHjaSYltC 3qIRg32jkeWPZ+PIYsGXl3fpw1eYjSrDW7Rm6vdeB5/NKNB+QMb88FCDguBijo7W 9pm5rb+r+TwbngIuup+nL+d+cOzQUPAmIVfPuDqZZ/43tWrlxg3fXonJrRPmpnSY RCy8Ghs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgynC2XoAa1YGNWSkV0W F5is2Gfra2U+mJrpMlsxX0crBMrgiEztpNXE5OO6JSnVZQBcmnw8brGNVSxuJCtD v/JAd/RAtIEF62nbPxB3KyxYBC2w35NOqCudvHyajz25tDPkLr9YEJFT0eNwm/mJ Al4RkGzI5ympQ84SvrnXEKMaocnWQsHnHFA3hSDRNy2gpi2WhS+m8tkbUxqzgoFa WfN0JfjjGpLpzDsJV9ggZnsDoXXxZrU3t9r8AW4pQqshMnMtFkiR9VXfDNa+7tok UB/U9zKOI+fgDAeakBrkzEbM8LcFBJKbeAzrd4BfPsE83iB45/AU+0drFhewZqpG pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 126816025727382702880528537930548093231 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 09:57:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-05 09:56:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'osaka.dcmusic.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22981610692823883064818225871049417196208619151801751931079587866943161010368842159729723226731889238062153198215894241455188077362921002217997426955463160696079967703717398492716903662220064242548373065759894265438866189775577956547039173063799190005167850203161614535589410285513555069746649891946912688577189606125294791632328361532840417963843788453908573480928606584381099031859546453676487449112158323936530021842157633795722217523300588926142531185206337679196148391249110324853407454105778833661543369799650433561244391886428179512870038889906063960908023423133176476762316163763903876822123578695793689380517 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osaka.dcmusic.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f6a9f0326d0d8da611f42d0c7b46db8e80cc4e23 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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