project.jetnet.ch

Issued by StartCom Class 1 Primary Intermediate Server CA

About this certificate

This digital certificate with serial number 03:76:51 was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyAgreement DigitalSignature KeyEncipherment] (00010101) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=project.jetnet.ch,1.2.840.113549.1.9.1=#0c14706f73746d6173746572406a65746e65742e6368,2.5.4.13=#13173432303830332d6a3159506f38776163464d6938535346

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:51
Serial Number (int): 226897
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 48:f6:8c:89:9b:3e:c9:b6:1e:35:3a:ff:b2:1e:41:4c:79:33:d0:4c
AuthorityKeyId: eb:42:34:d0:98:b0:ab:9f:f4:1b:6b:08:f7:cc:64:2e:ef:0e:2c:45

Fingerprint (sha1): 4e:dc:4e:35:db:aa:02:83:c6:cb:cb:22:d4:54:fc:af:e7:92:a5:b6
Fingerprint (sha256): dd:aa:55:c2:ac:cd:58:5d:bc:e0:67:67:69:ee:7c:cd:ce:1c:f9:96:ab:7b:6c:35:7d:c0:4b:5e:cd:0a:f5:ff

Issuing Certificate URL: http://aia.startssl.com/certs/sub.class1.server.ca.crt

Revocation information

OCSP Server: http://ocsp.startssl.com/sub/class1/server/ca
CRL Distribution Point: http://crl.startssl.com/crt1-crl.crl

Check the revocation status for certificate project.jetnet.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for project.jetnet.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

project.jetnet.ch
jetnet.ch

Other certificates including the domain name jetnet.ch

(limited to 100 certificates)
mail.jetnet.ch
mia.jetnet.ch
project.jetnet.ch
project.jetnet.ch
mia.jetnet.ch
project.jetnet.ch
netservices.jetnet.ch
project.jetnet.ch
project.jetnet.ch
mail.jetnet.ch
project.jetnet.ch
project.jetnet.ch
project.jetnet.ch
project.jetnet.ch
project.jetnet.ch
netservices.jetnet.ch
project.jetnet.ch
mia.jetnet.ch
netservices.jetnet.ch
mia.jetnet.ch
*.jetnet.ch
project.jetnet.ch
netservices.jetnet.ch
mia.jetnet.ch
*.jetnet.ch
*.jetnet.ch
mia.jetnet.ch
project.jetnet.ch
mia.jetnet.ch
project.jetnet.ch
mia.jetnet.ch
project.jetnet.ch
netservices.jetnet.ch
project.jetnet.ch
project.jetnet.ch
mia.jetnet.ch
mia.jetnet.ch
mia.jetnet.ch
project.jetnet.ch
netservices.jetnet.ch
netservices.jetnet.ch
netservices.jetnet.ch
project.jetnet.ch
project.jetnet.ch

Certificate

The complete raw certificate details for project.jetnet.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw1lZ4r2Yijmv0n682emO
DRnKyMiqlARpKiFNXYsAz+XYRCpRzLPYUa+0/7+jFoo44INvBT5w3LPoVyaEd5jS
AxnidW6zYHwCuBLY2uocUY/7A1pGiSSMcxZIVSfA4P3vkIp2cjlDgPIwkykHgPrC
IB4zT+LfhvduJ9EXkAPC84kQrtEcrzBaglXvTe5aezPEX4tB1nw44UFKixEcUQzO
D7SDWKPDHu30i3jQqcdZdVN1s5wpLjpDkedX8mvWJtuWKnj5wbPXZtgvvmhK8XeJ
qwtLaC8/VQwuChO7SxFoq3UjVzC69/z7ISW/f3PdElgC64EYqM1T8kHoGDTQQqFI
nHdol16C2/iYFP++WiX8yGk9TGbCXtt+8ZBEYjR5d+5T3Wfxrs5PHet5hanKygpJ
+j/h/CouYHFtpwUIqit5xdRGijV97OM5mnYwndmXQcn7Cmu15O/QasEW4NFRDHrB
DRiskJNtwPQohAUSOZg1yw3jLwyfmzgSBxgyybQjnUku3nVNhgvucbDGANCJV9er
Iq9iIwVqS7Ob1eARHWlZKf31L6XZ5HTFkN0UmPKmtv9F5fNJpge3OUG54fkM+23h
W61jtRm+k9gsK2Kz9gDFLSY9DQcRPERmTZwmxPxIofEulnc8FDHz2BrjxVrNDaP6
JK/YmRSnVDbVFs/3lZjlDIsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 226897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Digital Certificate Signing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 Primary Intermediate Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-05-07 00:59:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-05-06 18:45:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '420803-j1YPo8wacFMi8SSF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'project.jetnet.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796954502445611568153502857526618958372163626319259725080785013883350461009169542141462829396568272815063106894195650726081418112432389046518998460942384563242997459283268204783141555212651529463466844587862614944703280548986162543339896526519385924221079410157104901521382705157530831211392873743140812490019610694776136484235132403866932650700969321968795531484856685314784264767871694151627710422958495789740960203045871489346288745112388700904528246150909268701907243477765284807926741462919567474591700579580960099398245037768763535584466378377881627771692200401884722700248944930581646735823067332601833487222431863112775511313758190083442788909014471532461050124468712362235927801357913514891703390469571419762587370537332039648873920784705198269219539957143515394534745343438747679009029129456068604492683817552804138357447951574220474465959412540974800619857010717406354056439007371666378395190257623420665390523708894962190685904945052308532061345708576046582719113763418261088898558693327062108782002572008792025768875016434371606199178114952184252514727589635448672561115040855646901289052903407179348883967581692874303445666866237998716715678624264020657903710586599078817759898532019158138732552509140533346416237808779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48f68c899b3ec9b61e353affb21e414c7933d04c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eb4234d098b0ab9ff41b6b08f7cc642eef0e2c45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.jetnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetnet.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (456 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/intermediate.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'StartCom Certification Authority'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 119 97 115 32 105 115 115 117 101 100 32 97 99 99 111 114 100 105 110 103 32 116 111 32 116 104 101 32 67 108 97 115 115 32 49 32 86 97 108 105 100 97 116 105 111 110 32 114 101 113 117 105 114 101 109 101 110 116 115 32 111 102 32 116 104 101 32 83 116 97 114 116 67 111 109 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 65 117 116 104 111 114 105 116 121 32 112 111 108 105 99 121 32 97 110 100 32 109 97 121 32 98 101 32 114 101 108 105 101 100 32 117 112 111 110 32 111 110 108 121 32 102 111 114 32 116 104 101 32 105 110 116 101 110 100 101 100 32 112 117 114 112 111 115 101 32 97 110 100 32 105 110 32 99 111 109 112 108 105 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 121 105 110 103 32 112 97 114 116 121 32 111 98 108 105 103 97 116 105 111 110 115 46 32 76 105 97 98 105 108 105 116 121 32 97 110 100 32 119 97 114 114 97 110 116 105 101 115 32 97 114 101 32 108 105 109 105 116 101 100 33]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/crt1-crl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com/sub/class1/server/ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sub.class1.server.ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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