*.pixnet.tw

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 44:cf:5b:48:09:00:80:78:9b:fa:82:70:d2:c9:6d:17 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pixnet.tw

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 44:cf:5b:48:09:00:80:78:9b:fa:82:70:d2:c9:6d:17
Serial Number (int): 91464160569578593781756219793640877335
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6a:6f:ca:e9:94:32:13:5e:d6:08:d0:0f:d8:5e:fe:8a:46:67:b3:bf
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 28:77:43:fd:cb:aa:f4:e0:84:cf:b9:29:14:6f:cb:65:5b:df:0c:7f
Fingerprint (sha256): b1:da:dd:f9:74:3b:e5:9d:07:59:7a:fd:59:12:0c:14:8d:3b:d3:ac:ae:d0:b0:6d:7b:d5:a3:6f:c6:6b:3d:10

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate *.pixnet.tw

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pixnet.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pixnet.tw
pixnet.tw

Other certificates including the domain name pixnet.tw

(limited to 100 certificates)
o.vpn.pixnet.tw
cdnstats.pixnet.tw
s.vpn.pixnet.tw
appmarket.pixnet.tw
*.pixnet.tw
bill.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.streamtopic.pixnet.tw
checklogin.videos.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
checklogin.adexpert.pixnet.tw
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.help2.pixnet.tw
checklogin.adexpert.pixnet.tw
s.vpn.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
appmarket.pixnet.tw
api.i.pixnet.cc
checklogin.streamtopic.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
checklogin.staging-buy.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
buy.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
o.vpn.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
checklogin.www.pixnet.net
checklogin.www.pixnet.net
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.staging-buy.pixnet.tw
appmarket.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
*.pixnet.tw
s.vpn.pixnet.tw
o.vpn.pixnet.tw
checklogin.help.pixnet.tw
bill.pixnet.tw
s.vpn.pixnet.tw
help.pixnet.tw
colostats.pixnet.tw
buy.pixnet.tw
s.vpn.pixnet.tw

Certificate

The complete raw certificate details for *.pixnet.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIQRM9bSAkAgHib+oJw0sltFzANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w
DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw
HhcNMjIwMTEwMDAwMDAwWhcNMjMwMTIxMjM1OTU5WjAWMRQwEgYDVQQDDAsqLnBp
eG5ldC50dzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANcYFVAmWg/t
tc++9xf3eIoC+T33DRLfuVX0JyUnVEy6IlHrmC7a32UDTZLFC59ik+CZzHbIpfiT
y9RKQwTq5KkuFdLjXyELzM88MdRCP2pgRikfHV2u28ia4GcGRSu0kJxKTaeFZIx2
wo7YLXE9OXmqdHRw09Sq/M5v/XoFE9yXS1054GO671uXuWyHqwy4uCgh1V4yJZuq
r7xzz/9ftUC+wgsf1IL2vSbZgZluQAGXalWF9gNhQElUyBc5ApnwdX9Ar4XgiiWN
Dp/QHtaCZ09tvlb4oXV45By9f1lJpzRz3wkfIznZ+sir2RMNgS6xEdBfFIjzUXFm
0Lt50t3ZPzUCAwEAAaOCAywwggMoMB8GA1UdIwQYMBaAFLOQp9jJr07NYTyffK1d
f0H9aTDqMB0GA1UdDgQWBBRqb8rplDITXtYI0A/YXv6KRmezvzAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwSwYDVR0gBEQwQjA2BgsrBgEEAbIxAQICGjAnMCUGCCsGAQUFBwIBFhlodHRw
czovL2Nwcy51c2VydHJ1c3QuY29tMAgGBmeBDAECATBBBgNVHR8EOjA4MDagNKAy
hjBodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENBMi5j
cmwwcwYIKwYBBQUHAQEEZzBlMDwGCCsGAQUFBzAChjBodHRwOi8vY3J0LnVzZXJ0
cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENBMi5jcnQwJQYIKwYBBQUHMAGGGWh0
dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wIQYDVR0RBBowGIILKi5waXhuZXQudHeC
CXBpeG5ldC50dzCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcArfe++nz/EMiL
nT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAF+QefVTwAABAMASDBGAiEAqgumS0WU
5kIlDkWDRrxGLStxskLg5mP+bQK4dFNL734CIQCTlz5BxUWkc3k81NQPNzB83R42
QyQNnPAjx9a7J4LkmAB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutS
AAABfkHn1QIAAAQDAEgwRgIhANbD0drif6DHVIsYHqsRSaJe79JEKl7VGUSUyASi
ApiTAiEAhjYRR9wOc3N6rxt/Nwa6qxVhe80U9dEpy730MnJGzlQAdQDoPtDaPvUG
NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAX5B59TpAAAEAwBGMEQCIFohllG0
GCl6EbBvpwxVkdyE7t5VOvzlCTrGZU2eLAHLAiANL0p9QSqIxlV8Xb5WDbIQJWOD
6yaJV/hnZvy6lSs84TANBgkqhkiG9w0BAQsFAAOCAQEARSe/hO2L/O8xm4dppirR
1dGaVeDZ2OfTERvzBio3Z3PnWYTbvfTewTxFMy8P6xhDvX7gZcLI696ToSW1ccBW
foHzdCVpBgQCas5UvWuW2DcDwnjT6H9K0sQ0RHpFbk2zdGXrT0s8DOIDTsmIEU0W
qS3XcEik9RoqhvV0QDXRUp1jqjNzAL76ALfAUR6w7o/kknvJwErecYMFsAUAOVmF
VUlZzemLNlqtf7dOrp09UQBWdRiKvGixG7F2XgQ3U0r9gBUwlTyqqQ69I5ntG9eY
Ei5uHXveXwSBAZqiVosgWxyoH4PnF8XvsHZNFS2lBpUYuVeAC4ac7CAmHwaKv+Tl
zw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xgVUCZaD+21z773F/d4
igL5PfcNEt+5VfQnJSdUTLoiUeuYLtrfZQNNksULn2KT4JnMdsil+JPL1EpDBOrk
qS4V0uNfIQvMzzwx1EI/amBGKR8dXa7byJrgZwZFK7SQnEpNp4VkjHbCjtgtcT05
eap0dHDT1Kr8zm/9egUT3JdLXTngY7rvW5e5bIerDLi4KCHVXjIlm6qvvHPP/1+1
QL7CCx/Ugva9JtmBmW5AAZdqVYX2A2FASVTIFzkCmfB1f0CvheCKJY0On9Ae1oJn
T22+VvihdXjkHL1/WUmnNHPfCR8jOdn6yKvZEw2BLrER0F8UiPNRcWbQu3nS3dk/
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91464160569578593781756219793640877335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pixnet.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27153111462988568385220359358082913788366078872220332846271460910950048756776807141572726947006314620391276090744593251365776868235319633785283009356971055668051491790161957723906711074770887058016746022420288457686695268287619821903260187892036503328855879297122959087162247273320813905643287846420253148942096754381509671071055289058656036413237555190293859996328580702191835991879532115009993602172950334259031374642391211564224840465040172680144399541056209509962482316719402323607277216878332562337800762613778798331892983082523807126291686615213645621549692926535986726202611706137753451293123198286065879826229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a6fcae99432135ed608d00fd85efe8a4667b3bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixnet.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixnet.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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