vpn1000.fast.eu
Issued by StartCom BR SSL ICA
About this certificate
This digital certificate with serial number 1b:fd:19:1d:ca:a0:f1:7f was issued on by StartCom CA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vpn1000.fast.eu,C=CZ
StartCom CA
Organization:
StartCom CA
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
ES
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:fd:19:1d:ca:a0:f1:7fSerial Number (int): 2016795823876141439
Serial Number lenght: 61 bits, 8 octets
SubjectKeyId: 2c:87:78:3c:53:f3:63:fe:46:2d:a3:14:a1:07:ec:4f:75:5a:19:82
AuthorityKeyId: fb:10:4b:95:b1:35:55:2f:bd:62:14:a9:52:02:12:0a:68:e8:12:42
Fingerprint (sha1): e3:2a:c7:94:4e:49:70:98:8e:5e:e4:78:be:02:df:71:0f:95:97:26
Fingerprint (sha256): eb:c1:77:7e:ee:71:b4:a1:8c:65:5d:a9:b0:b6:3d:0a:5c:16:a1:19:ab:de:5f:35:d9:7d:ff:47:39:c0:4e:af
Issuing Certificate URL: http://aia.startcomca.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startcomca.comCRL Distribution Point: http://crl.startcomca.com/sca-server1.crl
Check the revocation status for certificate vpn1000.fast.eu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vpn1000.fast.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vpn1000.fast.eu
Other certificates including the domain name fast.eu
(limited to 100 certificates)
*.fast.eu
*.fast.eu
helpdesk.matisa.ch
ithelp.visionrt.com
*.fast.eu
support.erm.com
it.littlegarth.org
itservicedesk.poundland.co.uk
support.erm.com
support.sodra.com
ithelp.visionrt.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
servicedesk.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
support.erm.com
itservicedesk.poundland.co.uk
servicedesk.hermesairports.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
servicedesk.fast.eu
helpdesk.matisa.ch
*.fast.eu
helpdesk.fast.eu
it.littlegarth.org
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
helpdesk.matisa.ch
it.littlegarth.org
itdesk.nyanheroes.com
helpdesk.acrotec.ch
helpdesk.acrotec.ch
*.fast.eu
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.sodra.com
servicedesk.ecm.software
support.sodra.com
*.fast.eu
itservicedesk.poundland.co.uk
servicedesk.fast.eu
servicedesk.fast.eu
servicedesk.hermesairports.com
support.erm.com
*.fast.eu
support.autogroup.gr
itrackcloud.nkt.com
servicedesk.bergtoys.com
itrackcloud.nkt.com
servicedesk.hermesairports.com
itrackcloud.nkt.com
vpn1000.fast.eu
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
*.fast.eu
servicedesk.hermesairports.com
*.fast.eu
itdesk.nyanheroes.com
support.autogroup.gr
servicedesk.fast.eu
support.sodra.com
vpn1000.fast.eu
itrackcloud.nkt.com
it.littlegarth.org
helpdesk.acrotec.ch
servicedesk.hermesairports.com
itdesk.nyanheroes.com
*.fast.eu
itdesk.nyanheroes.com
*.fast.eu
helpdesk.matisa.ch
ithelp.visionrt.com
*.fast.eu
support.erm.com
it.littlegarth.org
itservicedesk.poundland.co.uk
support.erm.com
support.sodra.com
ithelp.visionrt.com
servicedesk.bergtoys.com
helpdesk.matisa.ch
servicedesk.bergtoys.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
support.erm.com
itservicedesk.poundland.co.uk
servicedesk.hermesairports.com
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
servicedesk.fast.eu
helpdesk.matisa.ch
*.fast.eu
helpdesk.fast.eu
it.littlegarth.org
servicedesk.ecm.software
servicedesk.bergtoys.com
helpdesk.acrotec.ch
itdesk.nyanheroes.com
helpdesk.matisa.ch
it.littlegarth.org
itdesk.nyanheroes.com
helpdesk.acrotec.ch
helpdesk.acrotec.ch
*.fast.eu
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.sodra.com
servicedesk.ecm.software
support.sodra.com
*.fast.eu
itservicedesk.poundland.co.uk
servicedesk.fast.eu
servicedesk.fast.eu
servicedesk.hermesairports.com
support.erm.com
*.fast.eu
support.autogroup.gr
itrackcloud.nkt.com
servicedesk.bergtoys.com
itrackcloud.nkt.com
servicedesk.hermesairports.com
itrackcloud.nkt.com
vpn1000.fast.eu
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.nyanheroes.com
helpdesk.acrotec.ch
support.autogroup.gr
*.fast.eu
servicedesk.hermesairports.com
*.fast.eu
itdesk.nyanheroes.com
support.autogroup.gr
servicedesk.fast.eu
support.sodra.com
vpn1000.fast.eu
itrackcloud.nkt.com
it.littlegarth.org
helpdesk.acrotec.ch
servicedesk.hermesairports.com
itdesk.nyanheroes.com
*.fast.eu
itdesk.nyanheroes.com
Certificate
The complete raw certificate details for vpn1000.fast.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyzCCA7OgAwIBAgIIG/0ZHcqg8X8wDQYJKoZIhvcNAQELBQAwbDELMAkGA1UE BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSkwJwYDVQQLDCBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEcMBoGA1UEAwwTU3RhcnRDb20gQlIgU1NM IElDQTAeFw0xNzA2MzAxMjA2MTJaFw0xOTA2MzAwNDE2MDBaMCcxCzAJBgNVBAYT AkNaMRgwFgYDVQQDDA92cG4xMDAwLmZhc3QuZXUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSU3MhNM85lqB/USWWc1UvXiW8BpiKUhWKuOQxWRq5yeZj GjFCa7glF7rB0t511P3ipnBcmu/zfTryqnrAQhXizFSDIlHpBs3JoFpr2XeNx2R5 jnPESO1uUkG1dj7nZ+RmlKtzvZvEJURFRxQsbztE1VCXI2BtoLNFal38x55UUraE 37lzq9m6QRJuRbEpHvOCcXWdNKLjZ/NrOjJGSUelZXEb5TuR0RBwdBO8HGngLurJ zvV2OdzN8uOLQMImdfXHJJdpvgqmFWNaOKwPej4QNxAEsiE3OtCO90gbyja+CPbU K1EFhXpD3/QWdXQyTMyj5+pnpZQ9V4aGlWgcWoLNAgMBAAGjggG0MIIBsDBzBggr BgEFBQcBAQRnMGUwOwYIKwYBBQUHMAKGL2h0dHA6Ly9haWEuc3RhcnRjb21jYS5j b20vY2VydHMvc2NhLnNlcnZlcjEuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2Nz cC5zdGFydGNvbWNhLmNvbTAdBgNVHQ4EFgQULId4PFPzY/5GLaMUoQfsT3VaGYIw CQYDVR0TBAIwADAfBgNVHSMEGDAWgBT7EEuVsTVVL71iFKlSAhIKaOgSQjBSBgNV HSAESzBJMA0GCysGAQQBgbU3AQIDMDgGBmeBDAECATAuMCwGCCsGAQUFBwIBFiBo dHRwOi8vd3d3LnN0YXJ0Y29tY2EuY29tL3BvbGljeTA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vY3JsLnN0YXJ0Y29tY2EuY29tL3NjYS1zZXJ2ZXIxLmNybDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBoGA1Ud EQQTMBGCD3ZwbjEwMDAuZmFzdC5ldTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAgEAEOh2Chs7Aw0vIQRnu1kGM0J4aTz4bdvWMS2vcR/9o0b0 QJ6ND9EzyHEJPqV3zTa4rO72s/XpLM2Wo9J0386rOvp6/NEC7JnTIgyKDru5My8i /a5BlezPxgDG3CXJyAa1ibjUON94FWhy6rkQRfjoHfzCqb/socGJBuyb1chFr7k7 wT3YDLGvkI0Cb8wRqTTY8BzO5pDpLBIzTQ9JUXeXgpQLTSzFY33+5FxDFZ9F+EwP Ji7G+5NZtZefK5Wusweun5lGBn0uLmb8zktwYblKljFInJT1R5DmMdZhwjtj4z5Z GC7ITLqyIISDqT8h5XCNXZUXP9Em8XcmgV6/fhqN8K4UxiykVGEalxwMjihbdege AU5lw4m8eA9TloqMWd87MqeQGP3KJwN9keRqpTEPZ+9EUTgKToiqSq4hxWGwAyxb jHKqtiAUqeu0M6qGDAfQy8nV0DoJYgLPn91nC5Uf3aBc/69K7z/uDgNTAACKdRKP JAHAHeNx2g+5O+gPQbJHtuTW64pbJsxnIq5CQpXuV+LMdtxULUTrZf3XXn7oyyUw WUX9slJu/A0vCcBVk/Mls/SbLIJ+jjJM4/VyX4x8SHDu3gpPEaBve3IBSSv+AAxJ TAkLMcO7okeAhyrR9c8yHykGJfNzj8ZV/eUJ6topryWyknvvxGGhjhzNjZibS4E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lNzITTPOZagf1EllnNV L14lvAaYilIVirjkMVkaucnmYxoxQmu4JRe6wdLeddT94qZwXJrv83068qp6wEIV 4sxUgyJR6QbNyaBaa9l3jcdkeY5zxEjtblJBtXY+52fkZpSrc72bxCVERUcULG87 RNVQlyNgbaCzRWpd/MeeVFK2hN+5c6vZukESbkWxKR7zgnF1nTSi42fzazoyRklH pWVxG+U7kdEQcHQTvBxp4C7qyc71djnczfLji0DCJnX1xySXab4KphVjWjisD3o+ EDcQBLIhNzrQjvdIG8o2vgj21CtRBYV6Q9/0FnV0MkzMo+fqZ6WUPVeGhpVoHFqC zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2016795823876141439 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom BR SSL ICA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-30 12:06:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 04:16:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn1000.fast.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26551194636189271153103350259478957211893647713456044248442686218527298924852463856671540666386934440053974142899802409525352460755662354356205020688631976387558446297227140807118549112672654895735290000390126411238687969353716953645409819938862059865489440817844393831804421648799187395566162938447080467000653213687851121528299464026403274796559486649112482969304262024338794723139149220469415101591450319232149719774206626112027334400295901678214340307155716088069593957917404437718376446519769448995786413399095198848889591585533242234467299036188819084948774790579563549262748602359899750957677653658327225893581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startcomca.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startcomca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c87783c53f363fe462da314a107ec4f755a1982 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fb104b95b135552fbd6214a95202120a68e81242 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startcomca.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startcomca.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn1000.fast.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0010e8760a1b3b030d2f210467bb5906334278693cf86ddbd6312daf711ffda346f4409e8d0fd133c871093ea577cd36b8aceef6b3f5e92ccd96a3d274dfceab3afa7afcd102ec99d3220c8a0ebbb9332f22fdae4195eccfc600c6dc25c9c806b589b8d438df78156872eab91045f8e81dfcc2a9bfeca1c18906ec9bd5c845afb93bc13dd80cb1af908d026fcc11a934d8f01ccee690e92c12334d0f4951779782940b4d2cc5637dfee45c43159f45f84c0f262ec6fb9359b5979f2b95aeb307ae9f9946067d2e2e66fcce4b7061b94a9631489c94f54790e631d661c23b63e33e59182ec84cbab2208483a93f21e5708d5d95173fd126f17726815ebf7e1a8df0ae14c62ca454611a971c0c8e285b75e81e014e65c389bc780f53968a8c59df3b32a79018fdca27037d91e46aa5310f67ef4451380a4e88aa4aae21c561b0032c5b8c72aab62014a9ebb433aa860c07d0cbc9d5d03a096202cf9fdd670b951fdda05cffaf4aef3fee0e035300008a75128f2401c01de371da0fb93be80f41b247b6e4d6eb8a5b26cc6722ae424295ee57e2cc76dc542d44eb65fdd75e7ee8cb25305945fdb2526efc0d2f09c05593f325b3f49b2c827e8e324ce3f5725f8c7c4870eede0a4f11a06f7b7201492bfe000c494c090b31c3bba24780872ad1f5cf321f290625f3738fc655fde509eada29af25b2927befc461a18e1ccd8d989b4b81