conf.frey-raum.net

- frey-raum e.k. -

Issued by StartCom Class 4 EV Server CA

About this certificate

This digital certificate with serial number 13:b1:85:27:51:c8:4b:49:33:3e:06:74:57:05:26:0f was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

frey-raum e.k.

Company registration number: HRA705186
Organization: frey-raum e.k.
Address: Fabrikstrasse 5
Postal code: 76185
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 13:b1:85:27:51:c8:4b:49:33:3e:06:74:57:05:26:0f
Serial Number (int): 26177069139560116291140587975306716687
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 15:e5:6a:51:fc:f2:96:10:12:a7:3c:b5:6d:32:24:d2:fd:32:a5:d4
AuthorityKeyId: 0e:d8:0d:d2:66:1d:ab:72:b6:89:65:4b:64:3d:7e:18:27:d4:8c:de

Fingerprint (sha1): 85:f8:f2:13:9f:13:b5:e5:5f:92:30:1d:c5:54:44:62:4b:a0:c8:d3
Fingerprint (sha256): db:63:99:68:04:d4:bd:e7:99:04:5d:a9:03:ca:dd:8e:fe:3a:a7:81:6c:b3:9a:e6:9e:0a:83:12:62:81:0a:0d

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server4.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server4.crl

Check the revocation status for certificate conf.frey-raum.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conf.frey-raum.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conf.frey-raum.net

Other certificates including the domain name frey-raum.net

(limited to 100 certificates)
dev2.frey-raum.net
chat.frey-raum.net
www.frey-raum.net
*.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
git.frey-raum.net
www.frey-raum.net
frey-raum.net
chat.frey-raum.net
www.frey-raum.net
chat.frey-raum.net
jira.frey-raum.net
bitbucket.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
conf.frey-raum.net
chat.frey-raum.net
vpn.frey-raum.net
www.frey-raum.net
*.frey-raum.net
crm.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
vpn.frey-raum.net
cloud.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
conf.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
mail.frey-raum.net
dev2.frey-raum.net
frey-raum.net
www.frey-raum.net
www.frey-raum.net
mail.frey-raum.net
frey-raum.net
frey-raum.net
frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
www.frey-raum.net
www.frey-raum.net
frey-raum.net
www.frey-raum.net
secure.frey-raum.net
chat.frey-raum.net
mail.frey-raum.net
frey-raum.net
chat.frey-raum.net
crm.frey-raum.net

Certificate

The complete raw certificate details for conf.frey-raum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwliGVj1pOKO0TSZpJd1/
XYE5HV6ZEFfNapFWi/YOM8kaHp330LrE9MYg1MiLlHpyAnhRdszUO1urBncLYjT4
zBPZcGtJkeaVYbRMIXGFXC+dYOxUstTFtA7YrXnlYJZN73Vf1Y4u7ACJPEcRigUi
PP7G64Nu86Legp9zdHaE0C+mrtZjxbaJypcRXNCo9y3wVFSvsNmFqGisZmi3ev+y
le6MJA4bJ+exr8N6Hb8iRTr11G8ygyiwLhVt1ldoU5ntOsCVgVqfNqyQ37j9c0u0
GhmBM9wOOvTDJvCg2GUym0reErJ+/U8biRPBJBaPFXv3QFCIokczXkwrfUyGFU+o
WzvGYHCEkhrM5bDmriEsCs3CcN0cpHqa5cuWPAnxqZl/06LEDGKbjtGfZPR6Da82
jxLMLhfUlhgKYk3kuFa6lnVnpjvYnrOGlq83KHGqCwZwDCjOoV4DLts8vcrpv7sT
/zXBfKroekmtCnbAYKlm910nORkDjJa5Cmw3qZaqqBwm2mdt6JjCcAH4fF5sX1Kh
RuxYTNLEhlDVbmnqIyO+twJcxu0c/2UzShI5rpRCsmVaHfPpjJF71yjrORVpxohC
NE5yI6iC68jYMqvqqv+QDCoDvjnmjBY1VW/HVYHbH66j6nBx7K+0borY2VclijBp
d/9w0uoFFvpwroZb/sN+yh8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26177069139560116291140587975306716687
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 4 EV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-06 10:31:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 10:31:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA705186'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '76185'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fabrikstrasse 5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'frey-raum e.k.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'conf.frey-raum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792861689372262109953612651925316049710136694254016196802066803856282050484526873411932618989012513356999088901458449319368794741439284830346603503219152114524010471166894032833008884012688891909844385852873977486920610145369157241864729365705350578316778110796095999234518006209445481163144128698727157053244766514268235254689311553736602266489931892788924263164779271097799753424905577656418210056270277344371034415584750021161194366182438629666063522039319052696164139767859585892208710005052612001530322200602591074190774176630554172922223119116750677681569388814574763450628032705728215052715262038342428671427946113984725938319308967765432845093219266778847674346828484432238706356115537169360237646852482117501873249585863100838424515315469585893458930914666119946114024812615481443014010600907529890750012573679834766564591219812461335947341192330158742026928925962427813860369749456633957784076544959847635372653305026209393517439017674151471561387943787055643657376703947925699569988192897496971713993525598847883939479361178217360660342804660155875288568352745156773819365942199177673403283622470818164947807245405858201721905595527389686919988153480175462683559539340125592949920848141144196810278020192384624835134671391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15e56a51fcf2961012a73cb56d3224d2fd32a5d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0ed80dd2661dab72b689654b643d7e1827d48cde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.frey-raum.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.1.1 (StartCom EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (551 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (547 bytes)
							0221012f00ac3b9aed7fa9674757159e6d7d575672f9d98100941e9bdeffeca1313b75782d0000015799bce36400000401010034a576ec899550e9171987f9b0cadd06b8519aa57059a880bd8d60804565ce5946597e9b697c5b1b3f333043710a7ece4e449b9199c1487ed2d6d678793221bb08e12d3f87c89ef7f281f95ed9d10e56fd27fec158f908042c583e27aaac74bfac769947d1327a0fea989f08a70aae8a0f5e86d0c017a29b56238a4f71e18ae0e43f6ad2c44bf854eaddd211156e1dbbe7b17a0eacfa2216f16c4c8625418fc8fb148898e94806f763b95ec37929bf0f49ae4192e61d76f7aba5b14e93327fdbcda53a74d7e6545e9af2c8d41db92debe873df5984e4db076596ed27700c29f88fd6560250efc32110996035e2f53c6e2667a6aa316265cc1288acf06a75224d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015799bce7100000040300473045022100e0300ff7927416040f9510f70512633d58b2606d26718b750a138d47a353bec70220119bf3c2734afc358d17b6fde6811f4e11a996f465f3969c9eca79751478dbeb00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015799bce8ee000004030047304502210089a60fa8f8a31b83c1d3d9033c9ba5be76cf5d490d62e03535784b4ca703cbd802203b3e615c4566433b7fc718f799486c200c1729c5f101634ad13fb439648c0da3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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