crabbe.xenios.eu

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number fc:61:7a:8e:7f:59:71:f3:c9:9d:bc:18:a7:a5:28:6c was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crabbe.xenios.eu,OU=Domain Control Validated+OU=Gandi Standard SSL

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): fc:61:7a:8e:7f:59:71:f3:c9:9d:bc:18:a7:a5:28:6c
Serial Number (int): 335471593476860129550810371875450202220
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: af:1d:69:71:49:45:c4:08:84:6e:be:f4:1b:97:7f:ff:c1:12:38:1f
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): eb:61:12:9c:5c:bc:5c:f2:44:17:5b:e2:38:7e:8d:84:cd:02:d1:82
Fingerprint (sha256): 9e:b1:72:a1:f5:f0:8d:b8:3b:3c:71:f8:5e:3a:f3:22:55:49:28:de:45:64:9f:97:5e:89:ca:7c:a6:4b:d1:de

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate crabbe.xenios.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crabbe.xenios.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crabbe.xenios.eu
www.crabbe.xenios.eu

Other certificates including the domain name xenios.eu

(limited to 100 certificates)
massa.xenios.eu
evrard.xenios.eu
re3.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
castiaux.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
biel-galle.xenios.eu
biel-galle.xenios.eu
deguide.xenios.eu
brule-scieur.xenios.eu
raxhon.xenios.eu
schmitz-noel.xenios.eu
deguide.xenios.eu
schmitz-noel.xenios.eu
biel-galle.xenios.eu
j-paques.xenios.eu
actionre3.xenios.eu
brule-scieur.xenios.eu
brule-scieur.xenios.eu
xharde.xenios.eu
schmitz-noel.xenios.eu
schmitz-noel.xenios.eu
www.xenios.eu
www.xenios.eu
www.xenios.eu
hostarii.xenios.eu
biel-galle.xenios.eu
xenios.eu
schmitz-noel.xenios.eu
biel-galle.xenios.eu
crabbe.xenios.eu
biel-galle.xenios.eu
hostarii.xenios.eu
brule-scieur.xenios.eu
j-paques.xenios.eu
schmitz-noel.xenios.eu
tefnin.xenios.eu
castiaux.xenios.eu
deguide.xenios.eu
biel-galle.xenios.eu
brule-scieur.xenios.eu
www.xenios.eu
castiaux.xenios.eu
raxhon.xenios.eu
biel-galle.xenios.eu
crabbe.xenios.eu
deguide.xenios.eu
deguide.xenios.eu
hostarii.xenios.eu
hostarii.xenios.eu
j-paques.xenios.eu
raxhon.xenios.eu
j-paques.xenios.eu
www.xenios.eu
j-paques.xenios.eu
j-paques.xenios.eu
castiaux.xenios.eu
biel-galle.xenios.eu
castiaux.xenios.eu
hostarii.xenios.eu
extranet.xenios.eu
biel-galle.xenios.eu
castiaux.xenios.eu
remy.xenios.eu
crabbe.xenios.eu
phsavdb.xenios.eu
www.xenios.eu
deguide.xenios.eu
hostarii.xenios.eu
www.hostarii.xenios.eu
evrard.xenios.eu
castiaux.xenios.eu
evrard.xenios.eu
tefnin.xenios.eu
hostarii.xenios.eu
schmitz-noel.xenios.eu
raxhon.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
castiaux.xenios.eu
phsavdb.xenios.eu
crabbe.xenios.eu
evrard.xenios.eu
www.xenios.eu
hostarii.xenios.eu
brule-scieur.xenios.eu
deguide.xenios.eu
phsavdb.xenios.eu
remy.xenios.eu
biel-galle.xenios.eu
schmitz-noel.xenios.eu
huissier-christiane.xenios.eu

Certificate

The complete raw certificate details for crabbe.xenios.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgIRAPxheo5/WXHzyZ28GKelKGwwDQYJKoZIhvcNAQELBQAw
XzELMAkGA1UEBhMCRlIxDjAMBgNVBAgTBVBhcmlzMQ4wDAYDVQQHEwVQYXJpczEO
MAwGA1UEChMFR2FuZGkxIDAeBgNVBAMTF0dhbmRpIFN0YW5kYXJkIFNTTCBDQSAy
MB4XDTE5MDkyNzAwMDAwMFoXDTIwMTEyNDIzNTk1OVowWzEhMB8GA1UECxMYRG9t
YWluIENvbnRyb2wgVmFsaWRhdGVkMRswGQYDVQQLExJHYW5kaSBTdGFuZGFyZCBT
U0wxGTAXBgNVBAMTEGNyYWJiZS54ZW5pb3MuZXUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUHhuSuruoSPSW7mDLDblsJTQEGmPcA9/IiCgTbJ7HXhem
MAZoodJwAhc8quI1qJMLej/2c5hQy5FzDAP9CR3FEXqZlG0FD/+1kCd0Sho48V+n
e0rP+ZCciG0IZy5b/3lyINcQgmPNkZu9PwK6OBhRNdC73678Abw2As8ZPNgF2wjH
16xZYIWpm3JlLaqFFckoQUpr+O0zWu/OVCjpjcCxAzBzfC9MvfqpEj/j6k8OdI6S
oym4wGHCeFqldpxI+TgRpjxHTwXDFdS1Cda0ca9D6GyuKWfDxaiUGl8Ller2Mxki
XhcKN7D7HIf1XAvXK47Pwle/xXh+tYuSdCbKSqGJAgMBAAGjggLCMIICvjAfBgNV
HSMEGDAWgBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQUrx1pcUlFxAiE
br70G5d//8ESOB8wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQEC
AhowJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZn
gQwBAgEwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1c3QuY29t
L0dhbmRpU3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8BggrBgEF
BQcwAoYwaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xD
QTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMDEG
A1UdEQQqMCiCEGNyYWJiZS54ZW5pb3MuZXWCFHd3dy5jcmFiYmUueGVuaW9zLmV1
MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAsh4FzIuizYogTodm+Su5iiUgZ2va
+nDnsklTLe+LkF4AAAFtcUCFvAAABAMARzBFAiA9alIHlwgj1axxOx5OKI9iFIH0
1ol93Gz+7gutz43O5wIhANikgntPdOKjpUWQXn+um3sQmyLzXNYRdixe08S7bwGl
AHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtcUCF1wAABAMA
SDBGAiEA6ahdXtEIGXwJ9zvKSRvUa+LYj2R7yngy777BT6fM278CIQDWJIxblKmh
yzkDVLYfzbPIdsSuYwC3MazjfrbkwAB/8DANBgkqhkiG9w0BAQsFAAOCAQEAUS7E
T9+NDrOtyjaALi24rQcv7SNE2sZZK3tWOO9xgIEkemrFDs8BjQbq33NEcOwJnuIE
gSUVj2Hln6OO3rWF8Pqu8rhYRR965V1L29hiRGIpqC+K68y7i1aV+K1dCyCQk5PR
XC3LIwtZYELaiRN9H8Lr0YK9/xhCkroVIqR7R6p1m/8QiH1nRhxbZ/1GZiqwYNa7
kDnbflQaRouPBHNyi1ikg9UOfL7mcL44d+ib/u4U+EqTcaUQ6vznWw8DYy/SlNVD
svZOhcdJnuSfFs3vcJNx4R5gainBqi0zkx10eokOBnN/+pgGnx0hDuRYoIfovuuu
P8os7LjKueSfg5U/Kw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B4bkrq7qEj0lu5gyw25
bCU0BBpj3APfyIgoE2yex14XpjAGaKHScAIXPKriNaiTC3o/9nOYUMuRcwwD/Qkd
xRF6mZRtBQ//tZAndEoaOPFfp3tKz/mQnIhtCGcuW/95ciDXEIJjzZGbvT8CujgY
UTXQu9+u/AG8NgLPGTzYBdsIx9esWWCFqZtyZS2qhRXJKEFKa/jtM1rvzlQo6Y3A
sQMwc3wvTL36qRI/4+pPDnSOkqMpuMBhwnhapXacSPk4EaY8R08FwxXUtQnWtHGv
Q+hsrilnw8WolBpfC5Xq9jMZIl4XCjew+xyH9VwL1yuOz8JXv8V4frWLknQmykqh
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335471593476860129550810371875450202220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crabbe.xenios.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26777367316795975221552919775530479667819223997302360272777420323429410921426828364799408600399260029677698482677853176419119301916137397948273102875057473449707961586154304535897491753978524947340526010546587628436026157130643618985263306155965038081572969096697205588711930231582278687139650268099181814727668289219238984382079613254486179495154376554946816494571580273283702203802818709458823694512353316727985045302758715893160084038881361578289393387412105317582812282031405246441698015141560983017577409815707673570689976143060409008999947759200663387035309965354439614938099869230279466026802420293492414259593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af1d69714945c408846ebef41b977fffc112381f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crabbe.xenios.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crabbe.xenios.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d714085bc000004030047304502203d6a5207970823d5ac713b1e4e288f621481f4d6897ddc6cfeee0badcf8dcee7022100d8a4827b4f74e2a3a545905e7fae9b7b109b22f35cd611762c5ed3c4bb6f01a50077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d714085d70000040300483046022100e9a85d5ed108197c09f73bca491bd46be2d88f647bca7832efbec14fa7ccdbbf022100d6248c5b94a9a1cb390354b61fcdb3c876c4ae6300b731ace37eb6e4c0007ff0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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