hosting.e-dcs.de
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 5b:41:44:93:f9:1c:40:eb:39:15:67:34:1e:1b:07:92 was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hosting.e-dcs.de
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 5b:41:44:93:f9:1c:40:eb:39:15:67:34:1e:1b:07:92Serial Number (int): 121298637839720970079564579427573237650
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 3d:0f:1d:9d:68:82:9b:a2:e1:70:7f:63:47:38:d6:aa:19:d8:8c:a2
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af
Fingerprint (sha1): 99:d7:a5:ee:3f:7b:a7:ed:b8:0e:c6:c5:bd:05:e4:87:75:ba:f2:c1
Fingerprint (sha256): d7:fd:52:52:00:e1:b4:16:90:5d:39:f3:9a:bc:87:56:56:f8:d5:d7:3d:44:34:0a:52:c4:30:6b:e8:63:66:1e
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate hosting.e-dcs.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hosting.e-dcs.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hosting.e-dcs.de
service.e-dcs.de
service.e-dcs.de
Other certificates including the domain name e-dcs.de
(limited to 100 certificates)
rz1810.e-dcs.de
rz1810.e-dcs.de
rz1810.e-dcs.de
e-dcs.de
rz1810.e-dcs.de
mx2.e-dcs.de
e-dcs.de
service.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
mx1.e-dcs.de
service.e-dcs.de
afdnordsachsen.e-dcs.de
e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
mx1.e-dcs.de
rene-bochmann.de
service.e-dcs.de
rz2210.e-dcs.de
service.e-dcs.de
rz1810.e-dcs.de
rz1810.e-dcs.de
hajoscho.de
www.e-dcs.de
rz1810.e-dcs.de
afdnordsachsen.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
service.e-dcs.de
ftp1.e-dcs.de
rz1810.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
e-dcs.de
hosting.e-dcs.de
ftp1.e-dcs.de
hosting.e-dcs.de
mx2.e-dcs.de
service.e-dcs.de
www.e-dcs.de
service.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
www.e-dcs.de
service.e-dcs.de
service.e-dcs.de
e-dcs.de
ftp1.e-dcs.de
hosting.e-dcs.de
rz1810.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
www.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
e-dcs.de
service.e-dcs.de
gudrun-petzold.de
www.e-dcs.de
afd-nordsachsen.de
service.e-dcs.de
rz1810.e-dcs.de
rz1810.e-dcs.de
e-dcs.de
rz1810.e-dcs.de
mx2.e-dcs.de
e-dcs.de
service.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
mx1.e-dcs.de
service.e-dcs.de
afdnordsachsen.e-dcs.de
e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
mx1.e-dcs.de
rene-bochmann.de
service.e-dcs.de
rz2210.e-dcs.de
service.e-dcs.de
rz1810.e-dcs.de
rz1810.e-dcs.de
hajoscho.de
www.e-dcs.de
rz1810.e-dcs.de
afdnordsachsen.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
service.e-dcs.de
ftp1.e-dcs.de
rz1810.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
e-dcs.de
hosting.e-dcs.de
ftp1.e-dcs.de
hosting.e-dcs.de
mx2.e-dcs.de
service.e-dcs.de
www.e-dcs.de
service.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
www.e-dcs.de
service.e-dcs.de
service.e-dcs.de
e-dcs.de
ftp1.e-dcs.de
hosting.e-dcs.de
rz1810.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
www.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
www.e-dcs.de
www.e-dcs.de
hosting.e-dcs.de
service.e-dcs.de
hosting.e-dcs.de
e-dcs.de
service.e-dcs.de
gudrun-petzold.de
www.e-dcs.de
afd-nordsachsen.de
service.e-dcs.de
Certificate
The complete raw certificate details for hosting.e-dcs.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIQW0FEk/kcQOs5FWc0HhsHkjANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MDUyOTA3MzcwNVoXDTE3MDUy OTA3MzcwNVowGzEZMBcGA1UEAwwQaG9zdGluZy5lLWRjcy5kZTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAM49yg52C0i8yfZz94qZHW/nDDW5oE0ZVPfn cmePiT0QvY4Fu42xm23FcACR65N8SU0YvGbg9ZINRdG6Ow6BJ7XJiKug0yFtaZoT SMboeXYTe0EvGEFWZgTF2A4YONB4AAqHUk06pIN43jCr15qopS0vMJvbn1gdtWmg 8322gLTAi0ZSXfLJSsYvBk+ceTM3G4ZLusxOKA+rW/Uw9aRuo+ANuo1nJRfVdpuC NnG/O5op3RMLyvzSKcdaJP6xj7+0HhnUDhURW/g4wAu9Tzve8mypVufzhiD+hYon 2x6lDMJ5P1f5P1ll28+tTNkko6e0F1GbH39OnzqOefJ0K8ZetGcCAwEAAaOCAeUw ggHhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwEwCQYDVR0TBAIwADAdBgNVHQ4EFgQUPQ8dnWiCm6LhcH9jRzjWqhnYjKIwHwYD VR0jBBgwFoAU15FOAcSwv/jIZ5NEnOcz+q2TDK8wbwYIKwYBBQUHAQEEYzBhMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wOQYIKwYBBQUHMAKG LWh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3NjYS5zZXJ2ZXIxLmNydDA4 BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zY2Etc2Vy dmVyMS5jcmwwLQYDVR0RBCYwJIIQaG9zdGluZy5lLWRjcy5kZYIQc2VydmljZS5l LWRjcy5kZTAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wUQYD VR0gBEowSDAIBgZngQwBAgEwPAYLKwYBBAGBtTcBAgUwLTArBggrBgEFBQcCARYf aHR0cHM6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgwQ7pUgQ84hdmxwNIALBd8XJgvz0W0j cNlQzZsvASYEYDoQIzXVVVBOSRR0x31WI7jn+AjluSPwe4TDJE8GqADs3n/Pb09Q Rh61K3Hrpwl4816yzP6Y2GpZ4RpXn6XWDdzgryRy9K9iQuzngA8tAkNOIapR/2sU qdjma9IN7FQufK9msClIC/qSppNN+s0S2kvU9PDS6HQOotBwVlyociYWbQaCxhFe eOBjAN/S/QhbPoKjmOt5dAX7ROdNEEd5RXdmkmhQ0l7KIB5NmzA0DSvtvIIFB72W lJDnnsuFbANENmMWX3kIHfYv+9vI/XLo8K3VgxWZseUBSo2AAtNx/g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj3KDnYLSLzJ9nP3ipkd b+cMNbmgTRlU9+dyZ4+JPRC9jgW7jbGbbcVwAJHrk3xJTRi8ZuD1kg1F0bo7DoEn tcmIq6DTIW1pmhNIxuh5dhN7QS8YQVZmBMXYDhg40HgACodSTTqkg3jeMKvXmqil LS8wm9ufWB21aaDzfbaAtMCLRlJd8slKxi8GT5x5Mzcbhku6zE4oD6tb9TD1pG6j 4A26jWclF9V2m4I2cb87mindEwvK/NIpx1ok/rGPv7QeGdQOFRFb+DjAC71PO97y bKlW5/OGIP6FiifbHqUMwnk/V/k/WWXbz61M2SSjp7QXUZsff06fOo558nQrxl60 ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 121298637839720970079564579427573237650 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-29 07:37:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-29 07:37:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hosting.e-dcs.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26035560254145040253255645372807207158365074306119770564967274537889238424289883220844835889882318429967565384107705277037430500297992627781894543268599465188243979714741251738325861649630222832600830249817636728208458782170849886491561785738609335786128692762601879150770913186234176316811806530800343285417962401778420486311682239618678773593624466733259713992032684192169249860970869419553656974656168568408657547603286785633656108034759390885370875607250565214821728869375874846303032199449564499353485544061654566551972821566402520706656161198466498767115131266430604343525201891493333887683014278854710763893863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3d0f1d9d68829ba2e1707f634738d6aa19d88ca2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.e-dcs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.e-dcs.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002a0c10ee952043ce21766c7034800b05df17260bf3d16d2370d950cd9b2f012604603a102335d555504e491474c77d5623b8e7f808e5b923f07b84c3244f06a800ecde7fcf6f4f50461eb52b71eba70978f35eb2ccfe98d86a59e11a579fa5d60ddce0af2472f4af6242ece7800f2d02434e21aa51ff6b14a9d8e66bd20dec542e7caf66b029480bfa92a6934dfacd12da4bd4f4f0d2e8740ea2d070565ca87226166d0682c6115e78e06300dfd2fd085b3e82a398eb797405fb44e74d104779457766926850d25eca201e4d9b30340d2bedbc820507bd969490e79ecb856c03443663165f79081df62ffbdbc8fd72e8f0add5831599b1e5014a8d8002d371fe