*.1.nflxso.net
- Netflix, Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0c:79:99:8b:07:b5:6e:c1:60:ed:cd:ed:c6:42:36:69 was issued on by DigiCert Inc.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Netflix, Inc.
Organization:
Netflix, Inc.
Organization unit: Content Delivery
Organization unit: Content Delivery
State / Province:
California
Locality: Los Gatos
Country: US
Locality: Los Gatos
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:79:99:8b:07:b5:6e:c1:60:ed:cd:ed:c6:42:36:69Serial Number (int): 16582118093071386475834514478106556009
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 77:e3:2a:fb:7e:c6:72:ce:ef:59:62:34:23:af:e8:dd:b9:92:94:a3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 49:4a:0a:f0:c0:2f:d4:c8:37:be:ca:44:5c:35:08:9e:cd:ff:ff:c6
Fingerprint (sha256): 00:03:df:fb:53:b4:0d:d0:6f:f7:ee:ba:56:9a:f3:56:4b:50:4e:66:dd:18:4e:30:d0:1a:60:ed:c6:d9:b8:b1
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate *.1.nflxso.net
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.1.nflxso.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ftl.nflxvideo.net
ftl.netflix.com
anycast.ftl.netflix.com
*.1.nflxso.net
*.staging.ftl.netflix.com
*.prod.ftl.netflix.com
*.r.nflxso.net
ftl.netflix.com
anycast.ftl.netflix.com
*.1.nflxso.net
*.staging.ftl.netflix.com
*.prod.ftl.netflix.com
*.r.nflxso.net
Other certificates including the domain name nflxso.net
(limited to 100 certificates)
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
*.1.nflxso.net
Certificate
The complete raw certificate details for *.1.nflxso.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIQDHmZiwe1bsFg7c3txkI2aTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNTI3MDAwMDAwWhcN MTkwNjMwMTIwMDAwWjCBgjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju aWExEjAQBgNVBAcTCUxvcyBHYXRvczEWMBQGA1UEChMNTmV0ZmxpeCwgSW5jLjEZ MBcGA1UECxMQQ29udGVudCBEZWxpdmVyeTEXMBUGA1UEAwwOKi4xLm5mbHhzby5u ZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IBlMyAVBtvn7uBFc tm9oTP7d6nlpo/uXPaKDwbKwIHUT2IAKPoe8IyoPQD8d8ykfXe3kd6ITzd2stLWv moW6v/YfIorSt+OMu6A12rdTQZCWfJQxtQfciGNniNefGIokuXnHPxxBu2hKPsPK 5fK3OZYyNiuK1ub5+tdiP+LFF7GjJL7raxltf5lSTCGljCxlLXWBtdQZ0ec/lVfS Dhgp8vWFxGDNbjkW4V5o2KyRelYHUiwOHKvZknFviPWevnbZxcNVdao4Bx+ehmSa 2LmLA770Ck0At0enEPnjTgTMADSw0ySejzJbPo5UYKv2MAUWq+zsOBBD/p2xca2f PfRhAgMBAAGjggJvMIICazAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ 4jAdBgNVHQ4EFgQUd+Mq+37Gcs7vWWI0I6/o3bmSlKMwgZ0GA1UdEQSBlTCBkoIT Ki5mdGwubmZseHZpZGVvLm5ldIIPZnRsLm5ldGZsaXguY29tghdhbnljYXN0LmZ0 bC5uZXRmbGl4LmNvbYIOKi4xLm5mbHhzby5uZXSCGSouc3RhZ2luZy5mdGwubmV0 ZmxpeC5jb22CFioucHJvZC5mdGwubmV0ZmxpeC5jb22CDiouci5uZmx4c28ubmV0 MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw awYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Et c2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2Nh LXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUH AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsG AQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t MEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl cnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHW eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAC1x4Jfe/hI4y1KdJyL9QQnj k6QJyI7ALLv0yVtxCoA+l6n0Y92fl1j1gl92asINkBMGWYg+XHVSysruqa/0NTq6 4XEQq7xP7b5hO6mJG6yAHRkoFaiWxmazvn9VnyVTDBQNSWiXaSFh21GE1oFKmyfH SQrvJ4LImb3nZ8+9lPig6BE9hu0hBZIR+dE+fQ1+4a5D6ncY+E2VnOgdYSB0+Wey TJrcG2zRJAxfabTGjYzzEWuTIMpyiDsJefQD80u8IyeJWHvxwWg+bwbR4bigjlZf M5gizgIisM5EqJAddDAC+vR+o7blDo1xoHORISFWnLqCJXII1GKGBe9FE/uzCkQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyAZTMgFQbb5+7gRXLZv aEz+3ep5aaP7lz2ig8GysCB1E9iACj6HvCMqD0A/HfMpH13t5HeiE83drLS1r5qF ur/2HyKK0rfjjLugNdq3U0GQlnyUMbUH3IhjZ4jXnxiKJLl5xz8cQbtoSj7DyuXy tzmWMjYritbm+frXYj/ixRexoyS+62sZbX+ZUkwhpYwsZS11gbXUGdHnP5VX0g4Y KfL1hcRgzW45FuFeaNiskXpWB1IsDhyr2ZJxb4j1nr522cXDVXWqOAcfnoZkmti5 iwO+9ApNALdHpxD5404EzAA0sNMkno8yWz6OVGCr9jAFFqvs7DgQQ/6dsXGtnz30 YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16582118093071386475834514478106556009 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Gatos' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netflix, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Content Delivery' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.1.nflxso.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23117438330733783681989189740279068643476320802224214203682478383406458182787097655262591292389675300831231471739565839512900797725171861982279681622007208609755784505129556176164084097760449797451564795753299376556438766245416334947201791978148102683832556806083138282808559920695730636586755633293429643217946121111418179276350796877874014704808667091260475979211025316619523416510212880420376033872712624295917051008296874508776194934768348035638383119197616212128611843706969049377598978109106207996940318230012205594672420870026038877397522541883104787741693987352470107729992614569135326088177843836230744011873 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 77e32afb7ec672ceef59623423afe8ddb99294a3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftl.nflxvideo.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftl.netflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anycast.ftl.netflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1.nflxso.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.ftl.netflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ftl.netflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r.nflxso.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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