listen.riffstash.com
Issued by COMODO RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 72:d3:e1:ca:35:f8:8d:03:72:75:06:a8:97:1d:c3:bd was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=listen.riffstash.com,OU=Domain Control Validated+OU=PositiveSSL
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 72:d3:e1:ca:35:f8:8d:03:72:75:06:a8:97:1d:c3:bdSerial Number (int): 152632145719584092688953060757444871101
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 80:90:f5:08:49:02:f2:91:ac:9c:58:00:b5:5a:6a:bf:69:bd:75:c4
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7
Fingerprint (sha1): f5:d0:81:90:93:59:80:e6:7b:b0:27:de:0f:53:ca:8b:42:a7:35:47
Fingerprint (sha256): 95:cd:cb:5d:94:1c:47:e7:14:1f:22:01:cc:bf:a2:e1:b1:35:04:58:17:b7:30:93:8f:61:38:a5:45:45:fc:13
Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
Check the revocation status for certificate listen.riffstash.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for listen.riffstash.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
listen.riffstash.com
www.listen.riffstash.com
www.listen.riffstash.com
Other certificates including the domain name riffstash.com
(limited to 100 certificates)
testwww.interplay.io
ngo.costalab.net
admin.inspector.vapta.co.uk
old.insideskeleton.com
staging--links.pkgx.io
riffstash.com
rcloudsoft.app
www.trepez.com
www.thecollectivemind.co
www.riffstash.com
rcloudsoft.app
app.riffstash.com
www.dpa8600.nkportfolio.com
depwaguinhoanabal.nerit.app
jamieandlee.com
app.riffstash.com
www.naturalhealingspa.co.uk
www.hextech.tools
biryanico.co.in
ngo.costalab.net
www.techneticconsult.com
aristoc.ug
www.trepez.com
riffstash.com
app.cavio.io
kabea.co
listen.riffstash.com
directory.toothpicstaging.com
mdndeveloper.com
www.rgvstorage.net
app.riffstash.com
www.lesrouq.com
www.sebblessing.de
theastrology.app
beta.finishes.app
dodraseva.com
riffstash.com
app.riffstash.com
riffstash.com
dapple.app
battlefit.app
sparks.ee
depwaguinhoanabal.nerit.app
directory.toothpicstaging.com
kabea.co
app.cavio.io
www.riffstash.com
www.kobayuto.com
www.rgvstorage.net
www.ygorduraes.com
livechat-dev.getfriday.ai
ktimes.app
authorization.firenotes.gocloud.link
amanjamin.com
www.doubleshotblog.com
admin.artiful.de
destination.lonestaraviators.com
verify.ratingit.app
livechat-dev.getfriday.ai
prod-app.fipresta.mx
reprintapp.com
dash.bash.social
www.prealyse.com
ngo.costalab.net
admin.inspector.vapta.co.uk
old.insideskeleton.com
staging--links.pkgx.io
riffstash.com
rcloudsoft.app
www.trepez.com
www.thecollectivemind.co
www.riffstash.com
rcloudsoft.app
app.riffstash.com
www.dpa8600.nkportfolio.com
depwaguinhoanabal.nerit.app
jamieandlee.com
app.riffstash.com
www.naturalhealingspa.co.uk
www.hextech.tools
biryanico.co.in
ngo.costalab.net
www.techneticconsult.com
aristoc.ug
www.trepez.com
riffstash.com
app.cavio.io
kabea.co
listen.riffstash.com
directory.toothpicstaging.com
mdndeveloper.com
www.rgvstorage.net
app.riffstash.com
www.lesrouq.com
www.sebblessing.de
theastrology.app
beta.finishes.app
dodraseva.com
riffstash.com
app.riffstash.com
riffstash.com
dapple.app
battlefit.app
sparks.ee
depwaguinhoanabal.nerit.app
directory.toothpicstaging.com
kabea.co
app.cavio.io
www.riffstash.com
www.kobayuto.com
www.rgvstorage.net
www.ygorduraes.com
livechat-dev.getfriday.ai
ktimes.app
authorization.firenotes.gocloud.link
amanjamin.com
www.doubleshotblog.com
admin.artiful.de
destination.lonestaraviators.com
verify.ratingit.app
livechat-dev.getfriday.ai
prod-app.fipresta.mx
reprintapp.com
dash.bash.social
www.prealyse.com
Certificate
The complete raw certificate details for listen.riffstash.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQctPhyjX4jQNydQaolx3DvTANBgkqhkiG9w0BAQsFADCB kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xNjAzMDEwMDAwMDBaFw0xNzAxMTcyMzU5NTlaMFgxITAfBgNVBAsTGERv bWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UECxMLUG9zaXRpdmVTU0wxHTAb BgNVBAMTFGxpc3Rlbi5yaWZmc3Rhc2guY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsl0axVtmGSjAN2t6xBFGT+pPGVmhukdc6bTJJ54ki++UGwbY VvhaPpOSbh3/4arHHBNAblBmGKKQNvdAW9HhbZUiQOOlHSNVdbRhIqoFkvo5sWIg Ob9ED5WY6B3rpfkyN2Qk+xfJx6E2O4ORcq9jlIY02Ddvwgi/hCRRxc8x4QDS+e0s PNNT8UseenpR7fRlZhq7DlHobmOtXQeef/wV6cuPMipIt3i+a6pGhb4Hloqq6U1s vt0IPFaNii31htCs7W4fNIsZ8aHBocCjwV+UUhFqkkzuLl6OQaUXoukM+PeW/Vap DaRhLp6pEgR41W50n4iJmJSBTG/z+p+h9SFfYwIDAQABo4IB6zCCAecwHwYDVR0j BBgwFoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucwHQYDVR0OBBYEFICQ9QhJAvKRrJxY ALVaar9pvXXEMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysGAQQBsjEBAgIH MCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgG BmeBDAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLmNvbW9kb2NhLmNv bS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGF BggrBgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29tb2RvY2Eu Y29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTA5BgNVHREEMjAw ghRsaXN0ZW4ucmlmZnN0YXNoLmNvbYIYd3d3Lmxpc3Rlbi5yaWZmc3Rhc2guY29t MA0GCSqGSIb3DQEBCwUAA4IBAQBPb69V8J616dip+AugboOxokamq/a2lm2dVabA Xqdn/v+kTjgEc6yXj+zX7y9y18PSRt//HNtLJNoZHdsVbBPrsTOz9Jz+h6+snymf fnlP6dV2itfu2qBBwe0vfqfLI5nlgweR11vPir2wd5y7MASU6iHMHlN/aREH0ij7 2PAAfHASs26ut4QhdPyYlPh0+AKvV9Ojd9kxBp/v25B23NNB+4CyN7Pv8PVPaZAE Vu54p9nOz7rcQMViUgKiGv5jWjOcww+Jncw8zGzsRSJr9ubL1MWLwuaL5nshJ+44 tK0mQqwRPMuiN0i0Fr+tCh/UhRDXeinB/0txKURznYNai12L -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl0axVtmGSjAN2t6xBFG T+pPGVmhukdc6bTJJ54ki++UGwbYVvhaPpOSbh3/4arHHBNAblBmGKKQNvdAW9Hh bZUiQOOlHSNVdbRhIqoFkvo5sWIgOb9ED5WY6B3rpfkyN2Qk+xfJx6E2O4ORcq9j lIY02Ddvwgi/hCRRxc8x4QDS+e0sPNNT8UseenpR7fRlZhq7DlHobmOtXQeef/wV 6cuPMipIt3i+a6pGhb4Hloqq6U1svt0IPFaNii31htCs7W4fNIsZ8aHBocCjwV+U UhFqkkzuLl6OQaUXoukM+PeW/VapDaRhLp6pEgR41W50n4iJmJSBTG/z+p+h9SFf YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 152632145719584092688953060757444871101 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'listen.riffstash.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22516329860510834368783578117421074438580167811181604671455312094556366652766853899622989825341674815814670130075824459397405449521247307646725062575618707083339329557800369813586167342068077240674996639955500478124454402900628013443797975565721909769241948105795137956159331777155347294366860298904160633966232851209853291136443976361694680337582387651487086412974124193887158269546129926249241263322728964125750661099425269150265465142815373626644136075279739695443709689724038355898283641047277949680109145359561064857400642081328800926702108176074577195908505151339963679167549029146655685008591207111138432081763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8090f5084902f291ac9c5800b55a6abf69bd75c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listen.riffstash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listen.riffstash.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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