*.bcndp.ca
- *.bcndp.ca -
Issued by Starfield Secure Certification Authority
About this certificate
This digital certificate with serial number 4e:e7:24:0a:39:3f:b4 was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
*.bcndp.ca
Organization:
*.bcndp.ca
Organization unit: Domain Control Validated
Organization unit: Domain Control Validated
Starfield Technologies, Inc.
Company registration number: 10688435
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 4e:e7:24:0a:39:3f:b4Serial Number (int): 22209190159794100
Serial Number lenght: 55 bits, 7 octets
SubjectKeyId: 4e:24:95:ce:6d:3e:4e:d6:91:87:4f:ef:58:ba:7a:a8:34:b3:c5:95
AuthorityKeyId: 49:4b:52:27:d1:1b:bc:f2:a1:21:6a:62:7b:51:42:7a:8a:d7:d5:56
Fingerprint (sha1): 26:9a:a9:3a:e8:1a:7b:bd:cc:8a:28:47:ac:69:4b:d1:91:d3:18:e0
Fingerprint (sha256): fc:64:bc:a2:74:ac:78:8a:05:09:07:84:20:f7:c4:72:e2:73:5f:a5:54:66:46:63:ae:27:57:0a:5a:17:e5:84
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sf_intermediate.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfs1-23.crl
Check the revocation status for certificate *.bcndp.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bcndp.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bcndp.ca
bcndp.ca
bcndp.ca
Other certificates including the domain name bcndp.ca
(limited to 100 certificates)
*.sanssl-012.bsdtools.com
bcndp-main.edge.bluestate.digital
act.progressiowa.org
*.sanssl-012.bsdtools.com
secure.bcndp.ca
secure.bcndp.ca
*.sanssl-012.bsdtools.com
act.boldprogressives.org
www-default.actionkit.com
www-default.actionkit.com
*.bcndp.ca
secure.bcndp.ca
*.sanssl-012.bsdtools.com
act.ilhanomar.com
*.bcndp.ca
act.progressnownm.org
peoplesmillion.whitehelmets.org
act.lucaskunce.com
act.sumofus.org
act.elizabethwarren.com
*.bcndp.ca
donate.demandaplan.org
*.sanssl-012.bsdtools.com
act.progressnc.org
bcndp-main.edge.bluestate.digital
secure.bcndp.ca
*.bcndp.ca
faithfulamerica.org
action.standupamerica.com
act.abwt.org
act.ruraldemocratsturnoutfund.com
act.jstreet.org
*.sanssl-012.bsdtools.com
secure.bcndp.ca
go.tonyevers.com
act.beaherofund.com
go.giffords.org
*.sanssl-012.bsdtools.com
*.bcndp.ca
act.ourrevolution.com
*.sanssl-012.bsdtools.com
bcndp-main.edge.bluestate.digital
*.sanssl-012.bsdtools.com
bcndp.ca
act.leaderswedeserve.com
*.sanssl-012.bsdtools.com
act.betoorourke.com
*.bcndp.ca
action.standupamerica.com
*.sanssl-012.bsdtools.com
bcndp.ca
bcndp.ca
act.bcndp.ca
act.fusewashington.org
secure.bcndp.ca
act.bcndp.ca
bcndp-main.edge.bluestate.digital
*.sanssl-012.bsdtools.com
*.bcndp.ca
bcndp.ca
*.bcndp.ca
*.sanssl-012.bsdtools.com
bcndp-main.edge.bluestate.digital
act.progressiowa.org
*.sanssl-012.bsdtools.com
secure.bcndp.ca
secure.bcndp.ca
*.sanssl-012.bsdtools.com
act.boldprogressives.org
www-default.actionkit.com
www-default.actionkit.com
*.bcndp.ca
secure.bcndp.ca
*.sanssl-012.bsdtools.com
act.ilhanomar.com
*.bcndp.ca
act.progressnownm.org
peoplesmillion.whitehelmets.org
act.lucaskunce.com
act.sumofus.org
act.elizabethwarren.com
*.bcndp.ca
donate.demandaplan.org
*.sanssl-012.bsdtools.com
act.progressnc.org
bcndp-main.edge.bluestate.digital
secure.bcndp.ca
*.bcndp.ca
faithfulamerica.org
action.standupamerica.com
act.abwt.org
act.ruraldemocratsturnoutfund.com
act.jstreet.org
*.sanssl-012.bsdtools.com
secure.bcndp.ca
go.tonyevers.com
act.beaherofund.com
go.giffords.org
*.sanssl-012.bsdtools.com
*.bcndp.ca
act.ourrevolution.com
*.sanssl-012.bsdtools.com
bcndp-main.edge.bluestate.digital
*.sanssl-012.bsdtools.com
bcndp.ca
act.leaderswedeserve.com
*.sanssl-012.bsdtools.com
act.betoorourke.com
*.bcndp.ca
action.standupamerica.com
*.sanssl-012.bsdtools.com
bcndp.ca
bcndp.ca
act.bcndp.ca
act.fusewashington.org
secure.bcndp.ca
act.bcndp.ca
bcndp-main.edge.bluestate.digital
*.sanssl-012.bsdtools.com
*.bcndp.ca
bcndp.ca
*.bcndp.ca
*.sanssl-012.bsdtools.com
Certificate
The complete raw certificate details for *.bcndp.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIHTuckCjk/tDANBgkqhkiG9w0BAQUFADCB3DELMAkGA1UE BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAj BgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOTA3BgNVBAsTMGh0 dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeTEx MC8GA1UEAxMoU3RhcmZpZWxkIFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0 eTERMA8GA1UEBRMIMTA2ODg0MzUwHhcNMTIxMjA0MTkzMjUxWhcNMTUxMjA0MTkz MjUxWjBNMRMwEQYDVQQKDAoqLmJjbmRwLmNhMSEwHwYDVQQLExhEb21haW4gQ29u dHJvbCBWYWxpZGF0ZWQxEzARBgNVBAMMCiouYmNuZHAuY2EwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC9qY+p09P8kWLauJVmzWGYoM20h+wNN9ZrBqMb Qf4ft8jLc23H/C/yspz8pmNxd+1lE2eQ/Gu0yunXKLwgN7Jx8eNTcZ1m9GEAFhe4 ywSmm4zvDu3arKYr9DhNcA1SFy2714WtrjMQ+IkYJu5HaJbAbNLejs9B4SCzyABy TV53qk9SdvGsP6kfCAuTKzH5OUaxFUieA7Zybk6mjcLtNAaeCnUCqNTy1XRhEDpl UXuhyTOO+BbmHHhN0S0FBuh9cW+S8ZuAqZi+RuXp4RIHpjyVPseysrvB4/07i4lV GqJmd5VYiNXuJIuAb44uBAqkTcfHUc8e0rQRoq89a8a5MFd5AgMBAAGjggHLMIIB xzAPBgNVHRMBAf8EBTADAQEAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAOBgNVHQ8BAf8EBAMCBaAwOQYDVR0fBDIwMDAuoCygKoYoaHR0cDovL2NybC5z dGFyZmllbGR0ZWNoLmNvbS9zZnMxLTIzLmNybDBZBgNVHSAEUjBQME4GC2CGSAGG /W4BBxcBMD8wPQYIKwYBBQUHAgEWMWh0dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZp ZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8wgY0GCCsGAQUFBwEBBIGAMH4wKgYIKwYB BQUHMAGGHmh0dHA6Ly9vY3NwLnN0YXJmaWVsZHRlY2guY29tLzBQBggrBgEFBQcw AoZEaHR0cDovL2NlcnRpZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0 b3J5L3NmX2ludGVybWVkaWF0ZS5jcnQwHwYDVR0jBBgwFoAUSUtSJ9EbvPKhIWpi e1FCeorX1VYwHwYDVR0RBBgwFoIKKi5iY25kcC5jYYIIYmNuZHAuY2EwHQYDVR0O BBYEFE4klc5tPk7WkYdP71i6eqg0s8WVMA0GCSqGSIb3DQEBBQUAA4IBAQBJ3Ajq KcTVa4td8iTgzA7E0VowVe/KwYCUsTAatTmlGk0xHNiPo3gzt7tGt7vy5bfoqBJF j9XFj0X451IlHXhikRmPRXxyunGHYCc9Q1PldY+iT3lzXvpf2yTU/jQcXQotvuyW GCIdQ9r4t0UtyFNhVBSSo+v+JH6y4Z3v4XKKbr4p6oI1BNcoczzGXAEkkXHDr094 XX0B+d6MlCldLV59MbT8pseTFeDTSA+ZwS8CvH5snmT27H0FIlyAikCoTLKIo3AW Z1k/GguDVdo6IKan4Kvrh3JIhhCa+2sIzNFyeqYx367OQ8xgd2Qx1k/CuW7rZpCO fwZe4dvk+C5qW6BS -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvamPqdPT/JFi2riVZs1h mKDNtIfsDTfWawajG0H+H7fIy3Ntx/wv8rKc/KZjcXftZRNnkPxrtMrp1yi8IDey cfHjU3GdZvRhABYXuMsEppuM7w7t2qymK/Q4TXANUhctu9eFra4zEPiJGCbuR2iW wGzS3o7PQeEgs8gAck1ed6pPUnbxrD+pHwgLkysx+TlGsRVIngO2cm5Opo3C7TQG ngp1AqjU8tV0YRA6ZVF7ockzjvgW5hx4TdEtBQbofXFvkvGbgKmYvkbl6eESB6Y8 lT7HsrK7weP9O4uJVRqiZneVWIjV7iSLgG+OLgQKpE3Hx1HPHtK0EaKvPWvGuTBX eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 22209190159794100 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.starfieldtech.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10688435' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-04 19:32:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 19:32:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bcndp.ca' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bcndp.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23942653375290099792778632878854937995452803092367185991564782691504015853290224860918831604763932352192353566774065072744525440616558652247665752811250733668220128413617860880352919032917747436286684674073194093657553464537459475070374143354014535584139369913261372216215807998645731309145656009901099137359864146695314182093476148268806882842325404884294201375887603864645342958416406425916694499096360523946877106431448335348324178975472541066101803813122122053060766459054357228290352690407021164033113210139758615600354988111734617224612635312513003451701291811050073750414474514299090662854823405518503902467961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfs1-23.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sf_intermediate.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 494b5227d11bbcf2a1216a627b51427a8ad7d556 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcndp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcndp.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4e2495ce6d3e4ed691874fef58ba7aa834b3c595 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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