*.refer.org
Issued by Gandi Standard SSL CA
About this certificate
This digital certificate with serial number 6f:16:ff:3a:5e:f7:92:60:ae:8d:59:82:cd:19:71:f2 was issued on by GANDI SAS.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
Certificate Subject
CN=*.refer.org,OU=Domain Control Validated+OU=Gandi Standard Wildcard SSL
GANDI SAS
Organization:
GANDI SAS
Country:
FR
This certificate has expire since
Certificate Details
Serial Number (hex): 6f:16:ff:3a:5e:f7:92:60:ae:8d:59:82:cd:19:71:f2Serial Number (int): 147663714702086671953062929248225423858
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 54:68:a5:49:af:72:3b:53:1f:9f:20:65:0c:10:da:fe:81:ea:d8:17
AuthorityKeyId: b6:a8:ff:a2:a8:2f:d0:a6:cd:4b:b1:68:f3:e7:50:10:31:a7:79:21
Fingerprint (sha1): e8:65:cf:c0:95:61:60:af:16:d3:91:e3:07:ca:01:be:ae:96:b0:7c
Fingerprint (sha256): ec:d8:dd:60:61:65:e2:11:04:d7:88:22:69:9b:e9:31:12:95:80:fc:54:45:67:65:42:8c:c9:10:39:fa:3f:3f
Issuing Certificate URL: http://crt.gandi.net/GandiStandardSSLCA.crt
Revocation information
OCSP Server: http://ocsp.gandi.netCRL Distribution Point: http://crl.gandi.net/GandiStandardSSLCA.crl
Check the revocation status for certificate *.refer.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.refer.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.refer.org
refer.org
refer.org
Other certificates including the domain name refer.org
(limited to 100 certificates)
senghor.refer.org
basarpcsi.eg.refer.org
examens.refer.org
listes.cm.refer.org
*.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
senghor.refer.org
listes.cm.refer.org
examens.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
basarpcsi.eg.refer.org
www.eg.auf.org
adip.eg.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
examens.refer.org
examens.refer.org
foad.refer.org
foad.refer.org
cnf-tripoli.eg.refer.org
senghor.refer.org
*.refer.org
www.eg.auf.org
mooc.refer.org
www.eg.auf.org
tg.refer.org
adip.eg.refer.org
foad.refer.org
examens.refer.org
listes.cm.refer.org
mooc.refer.org
foad.refer.org
senghor.refer.org
adip.eg.refer.org
mooc.refer.org
cnf-tripoli.eg.refer.org
www.eg.auf.org
mooc.refer.org
senghor.refer.org
www.eg.auf.org
fad-damanhour.eg.refer.org
listes.cm.refer.org
www.eg.auf.org
www.eg.auf.org
foad.refer.org
mooc.refer.org
examens.refer.org
basarpcsi.eg.refer.org
tg.refer.org
critique-mediatique.eg.refer.org
*.refer.org
basarpcsi.eg.refer.org
certificationtice102.refer.org
mooc.refer.org
basarpcsi.eg.refer.org
adip.eg.refer.org
examens.refer.org
foad.refer.org
listes.cm.refer.org
senghor.refer.org
examens.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
tg.refer.org
examens.refer.org
*.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
adip.eg.refer.org
critique-mediatique.eg.refer.org
adip.eg.refer.org
foad.refer.org
critique-mediatique.eg.refer.org
fad-damanhour.eg.refer.org
fad-damanhour.eg.refer.org
foad.refer.org
senghor.refer.org
listes.cm.refer.org
refer.org
fad-damanhour.eg.refer.org
adip.eg.refer.org
senghor.refer.org
basarpcsi.eg.refer.org
fad-damanhour.eg.refer.org
veilleauf.refer.org
senghor.refer.org
listes.cm.refer.org
mooc.refer.org
*.refer.org
*.refer.org
basarpcsi.eg.refer.org
cnf-tripoli.eg.refer.org
critique-mediatique.eg.refer.org
www.eg.auf.org
basarpcsi.eg.refer.org
examens.refer.org
listes.cm.refer.org
*.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
senghor.refer.org
listes.cm.refer.org
examens.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
basarpcsi.eg.refer.org
www.eg.auf.org
adip.eg.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
examens.refer.org
examens.refer.org
foad.refer.org
foad.refer.org
cnf-tripoli.eg.refer.org
senghor.refer.org
*.refer.org
www.eg.auf.org
mooc.refer.org
www.eg.auf.org
tg.refer.org
adip.eg.refer.org
foad.refer.org
examens.refer.org
listes.cm.refer.org
mooc.refer.org
foad.refer.org
senghor.refer.org
adip.eg.refer.org
mooc.refer.org
cnf-tripoli.eg.refer.org
www.eg.auf.org
mooc.refer.org
senghor.refer.org
www.eg.auf.org
fad-damanhour.eg.refer.org
listes.cm.refer.org
www.eg.auf.org
www.eg.auf.org
foad.refer.org
mooc.refer.org
examens.refer.org
basarpcsi.eg.refer.org
tg.refer.org
critique-mediatique.eg.refer.org
*.refer.org
basarpcsi.eg.refer.org
certificationtice102.refer.org
mooc.refer.org
basarpcsi.eg.refer.org
adip.eg.refer.org
examens.refer.org
foad.refer.org
listes.cm.refer.org
senghor.refer.org
examens.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
tg.refer.org
examens.refer.org
*.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
adip.eg.refer.org
critique-mediatique.eg.refer.org
adip.eg.refer.org
foad.refer.org
critique-mediatique.eg.refer.org
fad-damanhour.eg.refer.org
fad-damanhour.eg.refer.org
foad.refer.org
senghor.refer.org
listes.cm.refer.org
refer.org
fad-damanhour.eg.refer.org
adip.eg.refer.org
senghor.refer.org
basarpcsi.eg.refer.org
fad-damanhour.eg.refer.org
veilleauf.refer.org
senghor.refer.org
listes.cm.refer.org
mooc.refer.org
*.refer.org
*.refer.org
basarpcsi.eg.refer.org
cnf-tripoli.eg.refer.org
critique-mediatique.eg.refer.org
www.eg.auf.org
Certificate
The complete raw certificate details for *.refer.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIQbxb/Ol73kmCujVmCzRlx8jANBgkqhkiG9w0BAQUFADBB MQswCQYDVQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMR4wHAYDVQQDExVHYW5k aSBTdGFuZGFyZCBTU0wgQ0EwHhcNMTIwNTA5MDAwMDAwWhcNMTQwNTA5MjM1OTU5 WjBfMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxJDAiBgNVBAsT G0dhbmRpIFN0YW5kYXJkIFdpbGRjYXJkIFNTTDEUMBIGA1UEAxQLKi5yZWZlci5v cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrT7QqFxlfwJhfU5r GyzzAiyi1u6DSUjkzLpaAnrwRebOAIGlpGpAg+0vAjZMe8FBt0Xda3v+I0sbbp8A WQhAWdBDlGqFiu9TBZvWRDHebwxXQBVSaxrz5u96E68AF3wqovyPIhlA/WzVXFRD a/vQaSmiCcLaUuIEE6pNQKvs51fZ2JTb50utstFwX0A1pNn6MAS13jPadACfW5Kl BASZjFnyWyVCfdM9R0ffphp6s6826VtY425KaF1mbmTRKVg1zb45rMTox6dj9PHB 7tVlW9XaKh0tIQNfrRxjuE7j098jusAAXUZ/BDiZIOrsFxtAEgncvMlrO679UUF4 ZCUlAgMBAAGjggGmMIIBojAfBgNVHSMEGDAWgBS2qP+iqC/Qps1LsWjz51AQMad5 ITAdBgNVHQ4EFgQUVGilSa9yO1MfnyBlDBDa/oHq2BcwDgYDVR0PAQH/BAQDAgWg MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFYG A1UdIARPME0wSwYLKwYBBAGyMQECAhowPDA6BggrBgEFBQcCARYuaHR0cDovL3d3 dy5nYW5kaS5uZXQvY29udHJhY3RzL2ZyL3NzbC9jcHMvcGRmLzA8BgNVHR8ENTAz MDGgL6AthitodHRwOi8vY3JsLmdhbmRpLm5ldC9HYW5kaVN0YW5kYXJkU1NMQ0Eu Y3JsMGoGCCsGAQUFBwEBBF4wXDA3BggrBgEFBQcwAoYraHR0cDovL2NydC5nYW5k aS5uZXQvR2FuZGlTdGFuZGFyZFNTTENBLmNydDAhBggrBgEFBQcwAYYVaHR0cDov L29jc3AuZ2FuZGkubmV0MCEGA1UdEQQaMBiCCyoucmVmZXIub3JngglyZWZlci5v cmcwDQYJKoZIhvcNAQEFBQADggEBACSzNbgFdNPaQJ8b3i9oJMff+TeW8OQdKaAQ uWZcnrChuoI5h/p8gid5724OJ3QB9izlnsk1o0DNYS6ByOqJpsGhemeHqwcGSWie FCgIwFotp0yAKnG4AH3eG1bMxD1EWfRll5h4VgdnP5aBc4HZ6yTgA4Bbymg0HDsZ DNGU6jXc/dePIrfgCRFha03hkOrWsXmwo0n2IjW84w0Yb705Ew9KGQNNqUhFlnvR tm+i27+wQch0ELEIzKQMrdhUsll9AkvmpfzcSbMKL1EXUNCjM7wcyI74rLvyTcai 9aSyEP9LUMbtGVAHuLZc6SA7iuUemMZwkK+8wKR0wf266b80hFU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq0+0KhcZX8CYX1Oaxss 8wIsotbug0lI5My6WgJ68EXmzgCBpaRqQIPtLwI2THvBQbdF3Wt7/iNLG26fAFkI QFnQQ5RqhYrvUwWb1kQx3m8MV0AVUmsa8+bvehOvABd8KqL8jyIZQP1s1VxUQ2v7 0GkpognC2lLiBBOqTUCr7OdX2diU2+dLrbLRcF9ANaTZ+jAEtd4z2nQAn1uSpQQE mYxZ8lslQn3TPUdH36YaerOvNulbWONuSmhdZm5k0SlYNc2+OazE6MenY/Txwe7V ZVvV2iodLSEDX60cY7hO49PfI7rAAF1GfwQ4mSDq7BcbQBIJ3LzJazuu/VFBeGQl JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 147663714702086671953062929248225423858 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GANDI SAS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-05-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard Wildcard SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.refer.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26090521299664748060727922414047569658059600463277680791454341031998780004571866828196684522571270341453290577862327134357559696565653034394353896492401703335343023912695059404465516745370261428583323620848484491421183722778291308520486856122935906353666949617445471699322504042428061114795243940039177837470194457860243671111144799027217720873464385211416668407956458865165801981001490134638357054458368489147684107233297803430131908037913499684237783980211890775608050043696461448322424614612538847631716263043282656885809643115458252595110846441112313382835368904561894390375158967398715277388842885908296190141733 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6a8ffa2a82fd0a6cd4bb168f3e7501031a77921 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5468a549af723b531f9f20650c10dafe81ead817 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.gandi.net/contracts/fr/ssl/cps/pdf/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.gandi.net/GandiStandardSSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.gandi.net/GandiStandardSSLCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.gandi.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refer.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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