skiwo.com

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 18:dd:dd:48:03:ef:1a:cb:f8:be:e7:4f:6b:f4:59:4d was issued on by StartCom Ltd..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skiwo.com,C=NO

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 18:dd:dd:48:03:ef:1a:cb:f8:be:e7:4f:6b:f4:59:4d
Serial Number (int): 33053457622741800746286159261208959309
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 00:3a:3d:5c:87:ad:7a:27:7c:ec:22:b4:1b:7d:15:35:dd:88:24:fa
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): b3:b7:f6:7d:0d:a2:be:77:d4:4e:26:7e:29:f3:03:1b:13:80:d3:12
Fingerprint (sha256): cf:15:04:f1:bf:93:42:10:2d:c9:69:9c:7c:9e:11:5d:f3:90:b1:e5:74:29:41:6f:ee:1e:c2:a0:81:d6:23:79

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate skiwo.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skiwo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skiwo.com
dev.doctors.skiwo.com
staging.doctors.skiwo.com
doctors.skiwo.com

Other certificates including the domain name skiwo.com

(limited to 100 certificates)
staging.my.skiwo.com
www.tikktalk.com
www.tikktalk.com
www.tikktalk.com
time.skiwo.com
dev.my.skiwo.com
video.skiwo.com
skiwo.com
wordpressph.skiwo.com
staging.my.skiwo.com
skiwo.com
skiwo.com
dev.ws.skiwo.com
staging.my.skiwo.com
www.skiwo.com
my.skiwo.com
staging.www.tikktalk.com
staging.my.tikktalk.com
skiwo.com
staging.www.skiwo.com
skiwo.com
www.tikktalk.com
beta.skiwo.com
skiwo.com
dev.ws.skiwo.com
skiwo.com
beta.skiwo.com
video.tikktalk.com
skiwo.com
skiwo.com
video.salita.no
skiwo.com
www.skiwo.com
skiwo.com
skiwo.com
skiwo.com
skiwo.com
staging.my.skiwo.com
staging.www.skiwo.com
wrk-osl.videonor.net
my.tikktalk.com
beta.skiwo.com
wordpressph.skiwo.com
skiwo.com
skiwo.com
ws.skiwo.com
skiwo.com
my.skiwo.com
my.skiwo.com
staging.ws.skiwo.com
skiwo.com
skiwo.com
ws.skiwo.com
go.skiwo.com
www.tikktalk.com
dev.my.skiwo.com
ws.skiwo.com
dev.ws.skiwo.com
wrk-osl.videonor.net
my.skiwo.com
frankfurt.plusstidhome.skiwo.com
frankfurt.plusstidhome.skiwo.com
staging.my.skiwo.com
wrk-osl.videonor.net
wrk-osl.videonor.net
staging.ws.skiwo.com
www.skiwo.com
wordpressph.skiwo.com
ws.skiwo.com
wrk-osl.videonor.net
staging.www.skiwo.com
staging.my.skiwo.com
wordpressph.skiwo.com
www.skiwo.com
www.skiwo.com
wordpressph.skiwo.com
video.skiwo.com
skiwo.com
www.skiwo.com
wordpressph.skiwo.com
wrk-osl.videonor.net
timetracking.skiwo.com
wrk-osl.videonor.net
admin.skiwo.com
wrk-osl.videonor.net
www.skiwo.com
skiwo.com
wrk-osl.videonor.net
skiwo.com
skiwo.com
www.tikktalk.com
timereports.skiwo.com
staging.ws.skiwo.com
dev.ws.skiwo.com
skiwo.com
staging.my.tikktalk.com
my.skiwo.com
skiwo.com
skiwo.com
skiwo.com

Certificate

The complete raw certificate details for skiwo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGzCCBgOgAwIBAgIQGN3dSAPvGsv4vudPa/RZTTANBgkqhkiG9w0BAQsFADB4
MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg
U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0
Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MTAxMjE3MzgyN1oXDTE5MTAx
MjE3MzgyN1owITELMAkGA1UEBhMCTk8xEjAQBgNVBAMMCXNraXdvLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN7M1jfOMiYHmMG+0UGMwIGMekbp
NtNCv5sbx2ZY4NJM/C1Js9p6sEGjP4Tzwx27PQBZrZDzaTxVxa1ArHzBYwpSpg/u
oodhm5gODbmcu3dheTBjhkFDrYy2XxZu7zzUVMxHJw1j2ePUf0CPk/ghN0yEr7xi
fmXfZa+mn76rp2Wc8Hi4Bei2gljRn1BcC/hvI5hXpJZBRn/lvEiuuN5T99H6TLHw
GfozdyshnL32GsH2Mr/9O6yG3/zrWjnjw4Gd9TMQre8apihGOlHmY/RjrF1FC1MC
01lkmvZQSQp7HD6VxUYi6kVU5PJeGsBAX5nEAjEwAuJnX0VjqW7H/oN/OnUCAwEA
AaOCA/YwggPyMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYI
KwYBBQUHAwEwCQYDVR0TBAIwADAdBgNVHQ4EFgQUADo9XIeteid87CK0G30VNd2I
JPowHwYDVR0jBBgwFoAU15FOAcSwv/jIZ5NEnOcz+q2TDK8wbwYIKwYBBQUHAQEE
YzBhMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wOQYIKwYB
BQUHMAKGLWh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3NjYS5zZXJ2ZXIx
LmNydDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9z
Y2Etc2VydmVyMS5jcmwwWQYDVR0RBFIwUIIJc2tpd28uY29tghVkZXYuZG9jdG9y
cy5za2l3by5jb22CGXN0YWdpbmcuZG9jdG9ycy5za2l3by5jb22CEWRvY3RvcnMu
c2tpd28uY29tMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBR
BgNVHSAESjBIMAgGBmeBDAECATA8BgsrBgEEAYG1NwECBTAtMCsGCCsGAQUFBwIB
Fh9odHRwczovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5MIIB9gYKKwYBBAHWeQIE
AgSCAeYEggHiAeAAdgA0u2rWw9+cA+6opJn/eJFIbJ1eXKyS0B97/RvOGdtI7wAA
AVe6D+qIAAAEAwBHMEUCICUiD3iufdagc0zp+07Z2g+D1uB3stJv52ViUcF56Te2
AiEAgWWv12QPxGZ1aBTCXNA8+fH/0gnoV9r+PoxiyE7VudsAdgDuS723dc5guuFC
aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVe6D/LCAAAEAwBHMEUCIG0T+Ioc3odQ
ajor86tjD4D8UOk2T+H1E8gs6VGnYMBtAiEArlxtm1UsZAbARTVKKJLrVr6Nr0c4
BwSm2Y4AYVgB9BgAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAA
AVe6D++OAAAEAwBHMEUCIDZ3GPRxYnOhVGsnLeMUPKrCmSYC7MJkA5jLE3G1d6RN
AiEA4oOPzKiD+B71G7ejBy+cOSC7oSfEe9PIV9ZhjQTIQQAAdgBo9pj4H2SCvjqM
7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVe6D/DLAAAEAwBHMEUCIQDLWRm6LIgX
GhURWEGX63IKtVH6bO4qkVnLMrsX0kWwoQIgLFG3j7Zwk+ZdAXpytqnutL959zJT
/tmS+UBWYmy0T1AwDQYJKoZIhvcNAQELBQADggEBAFRZ29V5RIeH7jEBJDUHJQPP
b2ki6LhBxYPTbAMxYf8+X5ROs4zlaIUGl8+KK9FLNVotGCJ3RTrf14oghUhxdA1S
At7U7ujHXA1fBmLyyeKZwFoZQ6XQu4SS+5Zj78qZQxZidwCFiPKfnVrrch/+7IIy
io5A46PgFb+fJcuIEZ4W//q7zg/2jgBUArD5/gcKbSE6nf6lJPyUUK4gsNJ2xAH8
EK3o64lpdx5vh2FNoYqxS6EROtgsyzEeEHkcWFg012WttM6tku4d7qTnmQ8BMWJo
uqi6Y+TyY2/rmYqlEaI3su/HQZXzFU5BoeAqZ8vET8/RvFC49vnih8B//O4mZ7g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3szWN84yJgeYwb7RQYzA
gYx6Ruk200K/mxvHZljg0kz8LUmz2nqwQaM/hPPDHbs9AFmtkPNpPFXFrUCsfMFj
ClKmD+6ih2GbmA4NuZy7d2F5MGOGQUOtjLZfFm7vPNRUzEcnDWPZ49R/QI+T+CE3
TISvvGJ+Zd9lr6afvqunZZzweLgF6LaCWNGfUFwL+G8jmFeklkFGf+W8SK643lP3
0fpMsfAZ+jN3KyGcvfYawfYyv/07rIbf/OtaOePDgZ31MxCt7xqmKEY6UeZj9GOs
XUULUwLTWWSa9lBJCnscPpXFRiLqRVTk8l4awEBfmcQCMTAC4mdfRWOpbsf+g386
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33053457622741800746286159261208959309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-12 17:38:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 17:38:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'skiwo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28125912487781550814205933133178168206638185126174328110546714279557442104944895382214481634324584841071299397832612759407995728806653623306981082023456023795824088032282748843885557244110842892575055140234799901827253565522784854003211108085069329288498034269819625376578927729580352369064759568750574187874635885315648271898998806457832890303702318384417770782243950726920467054137728095973888304396360465683086437556595619913187853563110927995752878492972445490140669171504346808036798959201890090514609193221118180092545908595343733667726986406652360252535080640216917691322785342348688757405462313673649215715957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							003a3d5c87ad7a277cec22b41b7d1535dd8824fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.doctors.skiwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.doctors.skiwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.skiwo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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