vpn1000.fast.eu

Issued by StartCom BR SSL ICA

About this certificate

This digital certificate with serial number 1b:fd:19:1d:ca:a0:f1:7f was issued on by StartCom CA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn1000.fast.eu,C=CZ

StartCom CA

Organization: StartCom CA
Organization unit: StartCom Certification Authority
Country: ES

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:fd:19:1d:ca:a0:f1:7f
Serial Number (int): 2016795823876141439
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 2c:87:78:3c:53:f3:63:fe:46:2d:a3:14:a1:07:ec:4f:75:5a:19:82
AuthorityKeyId: fb:10:4b:95:b1:35:55:2f:bd:62:14:a9:52:02:12:0a:68:e8:12:42

Fingerprint (sha1): da:5c:11:ab:d5:a1:55:c8:98:59:2c:1a:f6:f6:a8:2b:0b:81:61:aa
Fingerprint (sha256): c5:66:7d:d6:ac:f9:da:b8:3b:1e:a6:91:f2:05:8d:58:44:9f:0a:00:09:3e:c6:07:d9:72:25:69:01:13:57:8e

Issuing Certificate URL: http://aia.startcomca.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startcomca.com
CRL Distribution Point: http://crl.startcomca.com/sca-server1.crl

Check the revocation status for certificate vpn1000.fast.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn1000.fast.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn1000.fast.eu

Other certificates including the domain name fast.eu

(limited to 100 certificates)
*.fast.eu
*.fast.eu
helpdesk.matisa.ch
ithelp.visionrt.com
*.fast.eu
support.erm.com
it.littlegarth.org
itservicedesk.poundland.co.uk
support.erm.com
support.sodra.com
ithelp.visionrt.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
servicedesk.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
support.erm.com
itservicedesk.poundland.co.uk
servicedesk.hermesairports.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
servicedesk.fast.eu
helpdesk.matisa.ch
*.fast.eu
helpdesk.fast.eu
it.littlegarth.org
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
helpdesk.matisa.ch
it.littlegarth.org
itdesk.nyanheroes.com
helpdesk.acrotec.ch
helpdesk.acrotec.ch
*.fast.eu
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.sodra.com
servicedesk.ecm.software
support.sodra.com
*.fast.eu
itservicedesk.poundland.co.uk
servicedesk.fast.eu
servicedesk.fast.eu
servicedesk.hermesairports.com
support.erm.com
*.fast.eu
support.autogroup.gr
itrackcloud.nkt.com
servicedesk.bergtoys.com
itrackcloud.nkt.com
servicedesk.hermesairports.com
itrackcloud.nkt.com
vpn1000.fast.eu
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
*.fast.eu
servicedesk.hermesairports.com
*.fast.eu
itdesk.nyanheroes.com
support.autogroup.gr
servicedesk.fast.eu
support.sodra.com
vpn1000.fast.eu
itrackcloud.nkt.com
it.littlegarth.org
helpdesk.acrotec.ch
servicedesk.hermesairports.com
itdesk.nyanheroes.com
*.fast.eu
itdesk.nyanheroes.com

Certificate

The complete raw certificate details for vpn1000.fast.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOTCCBSGgAwIBAgIIG/0ZHcqg8X8wDQYJKoZIhvcNAQELBQAwbDELMAkGA1UE
BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSkwJwYDVQQLDCBTdGFydENvbSBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEcMBoGA1UEAwwTU3RhcnRDb20gQlIgU1NM
IElDQTAeFw0xNzA2MzAxMjA2MTJaFw0xOTA2MzAwNDE2MDBaMCcxCzAJBgNVBAYT
AkNaMRgwFgYDVQQDDA92cG4xMDAwLmZhc3QuZXUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSU3MhNM85lqB/USWWc1UvXiW8BpiKUhWKuOQxWRq5yeZj
GjFCa7glF7rB0t511P3ipnBcmu/zfTryqnrAQhXizFSDIlHpBs3JoFpr2XeNx2R5
jnPESO1uUkG1dj7nZ+RmlKtzvZvEJURFRxQsbztE1VCXI2BtoLNFal38x55UUraE
37lzq9m6QRJuRbEpHvOCcXWdNKLjZ/NrOjJGSUelZXEb5TuR0RBwdBO8HGngLurJ
zvV2OdzN8uOLQMImdfXHJJdpvgqmFWNaOKwPej4QNxAEsiE3OtCO90gbyja+CPbU
K1EFhXpD3/QWdXQyTMyj5+pnpZQ9V4aGlWgcWoLNAgMBAAGjggMiMIIDHjBzBggr
BgEFBQcBAQRnMGUwOwYIKwYBBQUHMAKGL2h0dHA6Ly9haWEuc3RhcnRjb21jYS5j
b20vY2VydHMvc2NhLnNlcnZlcjEuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2Nz
cC5zdGFydGNvbWNhLmNvbTAdBgNVHQ4EFgQULId4PFPzY/5GLaMUoQfsT3VaGYIw
CQYDVR0TBAIwADAfBgNVHSMEGDAWgBT7EEuVsTVVL71iFKlSAhIKaOgSQjBSBgNV
HSAESzBJMA0GCysGAQQBgbU3AQIDMDgGBmeBDAECATAuMCwGCCsGAQUFBwIBFiBo
dHRwOi8vd3d3LnN0YXJ0Y29tY2EuY29tL3BvbGljeTA6BgNVHR8EMzAxMC+gLaAr
hilodHRwOi8vY3JsLnN0YXJ0Y29tY2EuY29tL3NjYS1zZXJ2ZXIxLmNybDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBoGA1Ud
EQQTMBGCD3ZwbjEwMDAuZmFzdC5ldTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp
AHYANLtq1sPfnAPuqKSZ/3iRSGydXlysktAfe/0bzhnbSO8AAAFc+O4bnQAABAMA
RzBFAiEAtzfbNe4q23n6cfm22nD1atZTQv29dQ0Snp/IYe0cJIwCIDedCSq8TxE8
/4vXCqbKTh8COJiG4CrgDfjfFJyq2ojWAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5
G9+443fNDsgN3BAAAAFc+O4d4gAABAMASDBGAiEA6n41dcSdQ5lxEcm/OIrpX/eb
D02YA9pJOkr7STPxAZQCIQDQpEFUWy377NwOJMENLwe147C3oMeFWxQtm5knTnNe
5wB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABXPjuITYAAAQD
AEcwRQIgSlR8Txy4yZphY3MxcCryJRtqmkjCTp7tTVFlpgIC94cCIQCuSpfUpQ8g
srZUMkrP4Ft4/rGG0EmWXDQqUSJcwWGkijANBgkqhkiG9w0BAQsFAAOCAgEAgRLe
A5YjsZS+08gScsR4snHd5erYjVSykunKCTHzetsYKDQHEWIJSiAqXShhxSj2YeNy
J7F0pcTY/UOwwwwqc1CQb2CT4cyydFQB/aHGKYd3dNnK6Gy3a10128az1NUrjqSO
PNyWjPlPpK2O1qHtzpt1BFbBL2Z6ud6tuj7JXy0gxyukPv+sVyDqLCJHbHuFxzsF
ZpF8nEQgY2UjKDMOXyRAOXmXUP1+2JEQK81DBMJE8v2WHM/kS5vkOaF1VN96RGTO
GgGYEXl8AJyPTXo1rMMLKAqEyNYMZN5Aj+JXPOJMkjM2xORgguPmYRPeOaR8nlJl
e3LYUvl5iEjC2HBDgddGC7CgBtilTViBfwwRgbPK7U9Zw+Rc9X7C/6eTPBae18HB
SsY7sd6H4/AY925A7xR+ME/beiYdzu68IXtZjTL1DG3LZmkH7HWl0dbWui2dk3Ke
n3QX5uVOsaLjIH6AuPfERPgFP2DjW86IgmL9pqupvVy8bvWl0AL+EZYTgYfciXdD
05mphZs6Ov2cfo2Ee5OupMsqh/k35j8/WyY79Qszxu6CaCL/CRsmnuhV88vMK9GZ
vsNYiNtTWVw+MEUOAGq6BeQTRMbic5PgFtEr+EKdmdzBYPmlh1VJUaP8g2lSmM9K
GrDMd/m3LEHgO4fzjJaztsAoFrBTa0stbhy0He4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lNzITTPOZagf1EllnNV
L14lvAaYilIVirjkMVkaucnmYxoxQmu4JRe6wdLeddT94qZwXJrv83068qp6wEIV
4sxUgyJR6QbNyaBaa9l3jcdkeY5zxEjtblJBtXY+52fkZpSrc72bxCVERUcULG87
RNVQlyNgbaCzRWpd/MeeVFK2hN+5c6vZukESbkWxKR7zgnF1nTSi42fzazoyRklH
pWVxG+U7kdEQcHQTvBxp4C7qyc71djnczfLji0DCJnX1xySXab4KphVjWjisD3o+
EDcQBLIhNzrQjvdIG8o2vgj21CtRBYV6Q9/0FnV0MkzMo+fqZ6WUPVeGhpVoHFqC
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2016795823876141439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom BR SSL ICA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-30 12:06:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 04:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn1000.fast.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26551194636189271153103350259478957211893647713456044248442686218527298924852463856671540666386934440053974142899802409525352460755662354356205020688631976387558446297227140807118549112672654895735290000390126411238687969353716953645409819938862059865489440817844393831804421648799187395566162938447080467000653213687851121528299464026403274796559486649112482969304262024338794723139149220469415101591450319232149719774206626112027334400295901678214340307155716088069593957917404437718376446519769448995786413399095198848889591585533242234467299036188819084948774790579563549262748602359899750957677653658327225893581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startcomca.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startcomca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c87783c53f363fe462da314a107ec4f755a1982
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fb104b95b135552fbd6214a95202120a68e81242
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startcomca.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startcomca.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn1000.fast.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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