remote.kathmandu.co.nz

Issued by COMODO SSL CA

About this certificate

This digital certificate with serial number 3b:2a:43:fd:37:b1:35:4b:b6:d6:9c:97:60:35:50:2f was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=remote.kathmandu.co.nz,OU=Domain Control Validated+OU=COMODO SSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:2a:43:fd:37:b1:35:4b:b6:d6:9c:97:60:35:50:2f
Serial Number (int): 78643907202772967124868768731908886575
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 70:fa:28:df:38:ab:6f:e8:87:57:5b:57:b5:33:29:0f:ba:eb:16:c1
AuthorityKeyId: 1b:6b:bd:1f:8a:49:18:94:54:37:55:b4:20:17:ed:37:b9:77:18:7d

Fingerprint (sha1): 86:cc:c9:78:cc:87:50:75:39:04:4e:80:d7:ce:f9:d5:ac:cd:f8:78
Fingerprint (sha256): c7:16:1a:a0:e8:5e:48:0c:8f:cc:c8:d3:e8:02:81:1c:e6:2a:0d:6e:0b:14:e5:f7:59:1b:0d:4a:af:8b:11:ca

Issuing Certificate URL: http://crt.comodoca.com/COMODOSSLCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOSSLCA.crl

Check the revocation status for certificate remote.kathmandu.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote.kathmandu.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote.kathmandu.co.nz
www.remote.kathmandu.co.nz

Other certificates including the domain name kathmandu.co.nz

(limited to 100 certificates)
sip.kathmandu.co.nz
sni.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
san-1-s4.tlsprovisioning.exacttarget.com
sip.kathmandu.co.nz
*.kathmandu.co.nz
sni.cloudflaressl.com
fbworkplace.kathmandu.co.nz
*.kathmandu.co.nz
ssl437943.cloudflaressl.com
ssl437943.cloudflaressl.com
fbworkplace.kathmandu.co.nz
ssl437941.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437942.cloudflaressl.com
ssl437941.cloudflaressl.com
www.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
image.20210419.195922.s4.et.yellsatcloud.com
webmail.kathmandu.co.nz
ssl437943.cloudflaressl.com
*.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
ssl437942.cloudflaressl.com
kathmandu.co.nz
ssl437941.cloudflaressl.com
webmail.kathmandu.co.nz
filetransfer.kathmandu.co.nz
san-1-s4.tlsprovisioning.exacttarget.com
san-1-s4.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sip.kathmandu.co.nz
*.kathmandu.co.nz
ssl437942.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437943.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437941.cloudflaressl.com
www.kathmandu.com.au
*.kathmandu.co.nz
ssl437941.cloudflaressl.com
ssl437942.cloudflaressl.com
sni.cloudflaressl.com
ssl437942.cloudflaressl.com
fbworkplace.kathmandu.co.nz
san-1-s4.tlsprovisioning.exacttarget.com
kathmandu.co.nz
ssl437943.cloudflaressl.com
webmail.kathmandu.co.nz
*.kathmandu.co.nz
filetransfer.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
gjljde.kathmandu.co.nz
kathmandu.co.nz
*.kathmandu.co.nz
kathmandu.co.nz
kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
*.kathmandu.co.nz
ssl437943.cloudflaressl.com
ssl437942.cloudflaressl.com
kathmandu.co.nz
*.kathmandu.co.nz
ssl437943.cloudflaressl.com
www.kathmandu.com.au
san-1-s4.tlsprovisioning.exacttarget.com
kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437943.cloudflaressl.com
gjljde.kathmandu.co.nz
remote.kathmandu.co.nz
sip.kathmandu.co.nz
webmail.kathmandu.co.nz
remote.kathmandu.co.nz
sip.kathmandu.co.nz
kathmandu.co.nz
sip.kathmandu.co.nz
ssl437942.cloudflaressl.com
*.kathmandu.co.nz
www.kathmandu.com.au
kathmandu.co.nz
fbworkplace.kathmandu.co.nz
kathmandu.co.nz
filetransfer.kathmandu.co.nz
ssl437943.cloudflaressl.com
www.kathmandu.co.nz
*.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
ssl437943.cloudflaressl.com
ssl437941.cloudflaressl.com
ssl437941.cloudflaressl.com
remote.kathmandu.co.nz

Certificate

The complete raw certificate details for remote.kathmandu.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIQOypD/TexNUu21pyXYDVQLzANBgkqhkiG9w0BAQUFADBw
MQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD
VQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDEWMBQGA1UE
AxMNQ09NT0RPIFNTTCBDQTAeFw0xMzA3MjMwMDAwMDBaFw0xNTA3MjMyMzU5NTla
MFkxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDETMBEGA1UECxMK
Q09NT0RPIFNTTDEfMB0GA1UEAxMWcmVtb3RlLmthdGhtYW5kdS5jby5uejCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJuiOF5WIAMyGMobeGd/q2Kylr4+
LnwLlUcVg3loq9tjHebitycCu6VGVJiznUjkNp/5bCbZcnj6Kw6jXo3LX4JwAtwS
fjJDLHrBwW9HhEwI8Vr2eKOvM7EL9sbOD7tpGJDURtWwLqP+SzPN/JfXalCQYwlR
RIa0f9YeF4kKs7GPeF53PcOiqPCrdNGZy2mQgChKkHfr9JQ8FQ+JK7BEFXsPbNBe
jYTRymONC1CMqvO79VBJJBd8OQx50NjryRcsOhkpu4gZ2KzKanZT+AfxSiejq+OY
n2YNNzj9x+6rlbuRE3pvVqa72Kv3FYavNiLuqjmrX4/k+Qcpz5OYPX9MZocCAwEA
AaOCAbYwggGyMB8GA1UdIwQYMBaAFBtrvR+KSRiUVDdVtCAX7Te5dxh9MB0GA1Ud
DgQWBBRw+ijfOKtv6IdXW1e1MykPuusWwTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgw
RjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5j
b21vZG8uY29tL0NQUzAIBgZngQwBAgEwOAYDVR0fBDEwLzAtoCugKYYnaHR0cDov
L2NybC5jb21vZG9jYS5jb20vQ09NT0RPU1NMQ0EuY3JsMGkGCCsGAQUFBwEBBF0w
WzAzBggrBgEFBQcwAoYnaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPU1NM
Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wPQYD
VR0RBDYwNIIWcmVtb3RlLmthdGhtYW5kdS5jby5ueoIad3d3LnJlbW90ZS5rYXRo
bWFuZHUuY28ubnowDQYJKoZIhvcNAQEFBQADggEBALhb52EU8jBUI6pUk6ChaiFV
t9yYWXHXKULDxQHEZ1kNzGnTTWfmdakD+a7tYyDDasZ268DOkpCPUdtYwKGghIk6
JxGs63tbxcjVj8dhgID6XPeeKIxocwsIBNAsY4bWRl6JYYhdCNHm/XILl0rtZB4l
Og6CTpeGXU0SWNvf6RBJKqlrHb2tEB8S0YCrIaMKt6zwllU5OnoypHu9/H8pIm2C
/adwXnm5q2D8fmZ5lDvBPKWI6cvWNeDNDz2rExwKm65WNrTJOIJtrxGKp80bKRKn
QqmYS6+InYp5y2KvQxlg1zsmoHNARB0HATxQdJAfVSr6wmdgA11sdW/N+ANe1I0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6I4XlYgAzIYyht4Z3+r
YrKWvj4ufAuVRxWDeWir22Md5uK3JwK7pUZUmLOdSOQ2n/lsJtlyePorDqNejctf
gnAC3BJ+MkMsesHBb0eETAjxWvZ4o68zsQv2xs4Pu2kYkNRG1bAuo/5LM838l9dq
UJBjCVFEhrR/1h4XiQqzsY94Xnc9w6Ko8Kt00ZnLaZCAKEqQd+v0lDwVD4krsEQV
ew9s0F6NhNHKY40LUIyq87v1UEkkF3w5DHnQ2OvJFyw6GSm7iBnYrMpqdlP4B/FK
J6Or45ifZg03OP3H7quVu5ETem9WprvYq/cVhq82Iu6qOatfj+T5BynPk5g9f0xm
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78643907202772967124868768731908886575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remote.kathmandu.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19646931026569773660865056636029989951396627554677230974910607526233046702623877230128366128684654504994667804268942650547447909761137045992782342508882144227382378883331686982117865259464690573817136148457888324973223513251884070223077462668125170127161302594926145628188729835800312174031445414893141798444533182551845881900710205502187878134928625722450752011342736386460003107118458275299394969923941065136525961640842363038460165162952889648126470081414491267755925617324881091324745027407863120888529360619884139642400565774549280458366893628061266158752483221749996282817295196524609555605005025421778939045511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b6bbd1f8a491894543755b42017ed37b977187d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70fa28df38ab6fe887575b57b533290fbaeb16c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remote.kathmandu.co.nz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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