displaycdn.lenovo.com
Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0b:65:19:34:c8:9b:6c:5f:4a:f9:37:cc:22:10:9d:d7 was issued on by DigiCert, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=displaycdn.lenovo.com
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:65:19:34:c8:9b:6c:5f:4a:f9:37:cc:22:10:9d:d7Serial Number (int): 15146441178535531465662140106920730071
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 42:9e:95:66:90:15:ca:bb:51:eb:56:85:9d:81:de:5f:a4:08:84:e2
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff
Fingerprint (sha1): ce:26:e0:f6:d9:c8:6e:a9:20:c6:43:8b:b4:a7:81:94:df:70:ad:69
Fingerprint (sha256): 00:81:22:73:7e:9a:d4:a6:80:78:59:0a:43:7e:46:b7:d2:fb:06:eb:67:03:f9:c8:a7:c9:27:50:33:55:27:01
Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate displaycdn.lenovo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for displaycdn.lenovo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
displaycdn.lenovo.com
Other certificates including the domain name lenovo.com
(limited to 100 certificates)
777bpce76.saagie.com
marketplace-templates-vpoc.cp.lenovo.com
777bpce76.saagie.com
*.lenovo.com
displaycdn.lenovo.com
www.maestro.io
activate.connect.lenovo.com
outlet.de.lenovo.com
api-test.tsc.lenovo.com
osd.lenovo.com
cxs.lenovo.com
www.thinkbook.com
geo.uds-qa.lenovo.com
loyalty.lenovo.com
mail.lenovo.com
subaru3-dev.lenovo.com
webform.wd.lenovo.com
*.lenovo.com
io.gdi.lenovo.com
esourcingtest.lenovo.com
*.csw.lenovo.com
testforums.lenovo.com
secure01.lithium.com
lcfc01.blt.lenovo.com
rolandberger.relmeetingapp.lenovo.com
receiver.b2b.lenovo.com
esbclient-cn-t.lenovo.com
mqtt-mtls-load.naea1.uds-qa.lenovo.com
scoe.lenovo.com
secure01.lithium.com
smartalbumcloud.lenovo.com
aployalty.lenovo.com
brazil-mds.lenovo.com
*.csw-stage.lenovo.com
smartedu.lenovo.com
amer-es.tw22.lenovo.com
*.bycube.lenovo.com
sni.cloudflaressl.com
www.maestro.io
*.lenovo.com
cowork.us.owa.lenovo.com
www.maestro.io
*.lenovo.com
oauth.csw.lenovo.com
spokenenglish.smartedu.lenovo.com
aefepl01.lenovo.com
homeedgeserver.lenovo.com
www.maestro.io
*.lenovo.com
stscn.lenovo.com
www.thinkbook.com
qa-sit.hub.lenovo.com
apservicesales.lenovo.com
*.lenovo.com
secure01.lithium.com
*.lenovo.com
log-smart.lenovo.com
*.adminhosting.shea1.lenovo.com
nonprod-idp-xclarityone.lenovo.com
fpvpn.hk.lenovo.com
test.wx.lenovo.com
linux.lenovo.com
brandworld.lenovo.com
*.lenovo.com
lscs-qa.dev.cloud.lenovo.com
suwen.lenovo.com
www.thinkbook.com
dalestatus.mambu.com
www.maestro.io
wireless.lenovo.com
sts.us.lenovo.com
sni.cloudflaressl.com
pages.lenovo.com
status.apoteket.dk
mqtt-mtls.naea1.uds-sit.lenovo.com
sni.cloudflaressl.com
*.resources.lenovo.com
less.naea1.uds.lenovo.com
uds.lenovo.com
analytics.status.atlassian.com
cc20.status.jasper.com
mitest.lenovo.com
test.le-credit.lenovo.com
mcstaging.store.lenovo.com
techworld21.lenovo.com
stscn.lenovo.com
ldiplusstatus.uds.lenovo.com
emea-it.tw22.lenovo.com
*.dev.cloud.lenovo.com
b2b.lenovo.com
mave.dds.lenovo.com
geo.cnno1.uds-sit.lenovo.com
embed-answers.cority.com.pagescdn.com
webvpncnpek01.lenovo.com
tracking.lenovo.com
*.lenovo.com
*.brain.lenovo.com
mfa-test-login.icelab.lenovo.com
cap.lenovo.com
xclarityone.lenovo.com
marketplace-templates-vpoc.cp.lenovo.com
777bpce76.saagie.com
*.lenovo.com
displaycdn.lenovo.com
www.maestro.io
activate.connect.lenovo.com
outlet.de.lenovo.com
api-test.tsc.lenovo.com
osd.lenovo.com
cxs.lenovo.com
www.thinkbook.com
geo.uds-qa.lenovo.com
loyalty.lenovo.com
mail.lenovo.com
subaru3-dev.lenovo.com
webform.wd.lenovo.com
*.lenovo.com
io.gdi.lenovo.com
esourcingtest.lenovo.com
*.csw.lenovo.com
testforums.lenovo.com
secure01.lithium.com
lcfc01.blt.lenovo.com
rolandberger.relmeetingapp.lenovo.com
receiver.b2b.lenovo.com
esbclient-cn-t.lenovo.com
mqtt-mtls-load.naea1.uds-qa.lenovo.com
scoe.lenovo.com
secure01.lithium.com
smartalbumcloud.lenovo.com
aployalty.lenovo.com
brazil-mds.lenovo.com
*.csw-stage.lenovo.com
smartedu.lenovo.com
amer-es.tw22.lenovo.com
*.bycube.lenovo.com
sni.cloudflaressl.com
www.maestro.io
*.lenovo.com
cowork.us.owa.lenovo.com
www.maestro.io
*.lenovo.com
oauth.csw.lenovo.com
spokenenglish.smartedu.lenovo.com
aefepl01.lenovo.com
homeedgeserver.lenovo.com
www.maestro.io
*.lenovo.com
stscn.lenovo.com
www.thinkbook.com
qa-sit.hub.lenovo.com
apservicesales.lenovo.com
*.lenovo.com
secure01.lithium.com
*.lenovo.com
log-smart.lenovo.com
*.adminhosting.shea1.lenovo.com
nonprod-idp-xclarityone.lenovo.com
fpvpn.hk.lenovo.com
test.wx.lenovo.com
linux.lenovo.com
brandworld.lenovo.com
*.lenovo.com
lscs-qa.dev.cloud.lenovo.com
suwen.lenovo.com
www.thinkbook.com
dalestatus.mambu.com
www.maestro.io
wireless.lenovo.com
sts.us.lenovo.com
sni.cloudflaressl.com
pages.lenovo.com
status.apoteket.dk
mqtt-mtls.naea1.uds-sit.lenovo.com
sni.cloudflaressl.com
*.resources.lenovo.com
less.naea1.uds.lenovo.com
uds.lenovo.com
analytics.status.atlassian.com
cc20.status.jasper.com
mitest.lenovo.com
test.le-credit.lenovo.com
mcstaging.store.lenovo.com
techworld21.lenovo.com
stscn.lenovo.com
ldiplusstatus.uds.lenovo.com
emea-it.tw22.lenovo.com
*.dev.cloud.lenovo.com
b2b.lenovo.com
mave.dds.lenovo.com
geo.cnno1.uds-sit.lenovo.com
embed-answers.cority.com.pagescdn.com
webvpncnpek01.lenovo.com
tracking.lenovo.com
*.lenovo.com
*.brain.lenovo.com
mfa-test-login.icelab.lenovo.com
cap.lenovo.com
xclarityone.lenovo.com
Certificate
The complete raw certificate details for displaycdn.lenovo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHnDCCBYSgAwIBAgIQC2UZNMibbF9K+TfMIhCd1zANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K1JhcGlkU1NMIEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMTIxMDAwMDAwWhcNMjQxMjEzMjM1OTU5WjAgMR4wHAYDVQQDExVkaXNwbGF5 Y2RuLmxlbm92by5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9 vTK/ZyAirbZVQVz0CHDwYywvhQjbbssKmCHGx0ez2VYK7XfZy5QhmAdVR9tLFQ04 8RMZ1zjcC2t2CC/Te/vue2XE4tPI3sr+fVOdoSPvnIC0GEuxo6/flw9uYvj8v0fe /sCbxVKeIig88mVb24LE03/pxsPALAng5c9kSvw3wdDsJ2MlyWDKRNIX7ierEkC7 RkBvoF422MQge+lo9iJrIWHX8zECnqhWQWsb/HUGHSdmtEjVVdEAwFdSjXaEIV5k xitTyozI8Ik+q1xzm1J5co5SyPxZk8RCrhDOzsD+xZrtzt93AmTs4jCNsKV9hLNA LmlteFbEDL77OiOi/N+FAgMBAAGjggOUMIIDkDAfBgNVHSMEGDAWgBTwnIX9op99 j8lou9XUiU0dvtOQ/zAdBgNVHQ4EFgQUQp6VZpAVyrtR61aFnYHeX6QIhOIwIAYD VR0RBBkwF4IVZGlzcGxheWNkbi5sZW5vdm8uY29tMD4GA1UdIAQ3MDUwMwYGZ4EM AQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGf BgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9SYXBp ZFNTTEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0 cDovL2NybDQuZGlnaWNlcnQuY29tL1JhcGlkU1NMR2xvYmFsVExTUlNBNDA5NlNI QTI1NjIwMjJDQTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL1JhcGlkU1NMR2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw MjJDQTEuY3J0MAwGA1UdEwEB/wQCMAAwggGBBgorBgEEAdZ5AgQCBIIBcQSCAW0B awB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi++R+zkAAAQD AEgwRgIhAKUx4AThxTCS6oEK47+LTMpByj7fC1Y0hnLuIfxEKapyAiEAtWry/QDL k3s+SQvVhSUnH6sJ5aRgs3ohFUsb9Dxlx5AAdwBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAYvvkftbAAAEAwBIMEYCIQCtkpGrsndB97+TPaWJarxX sG/omfkamFZ+BB0T7KBpPQIhAPvnlaObmQBsEgZ9rekBQ9jqL/xb/mZIIzIo425j uL9CAHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGL75H7WgAA BAMASDBGAiEAmh546w9YCQm+SIhDQZj2bYZz1wbXomB9yP0Ym2Nr+1cCIQC5PCSd +wWWy8SeYxB9l8Qc+HgZKGA3vHJQrYdWzwmhYjANBgkqhkiG9w0BAQsFAAOCAgEA blCCg5C1u5TzIAbEmfQcdjpFZUuXURsIiaHOwe9jX9DgQcxJB77B3PfPpQdPcoJ6 JOPS2ulYYQm3b1dY8qhizFoJ4aHNJzyJUJDe0NpNlUeuG7pzjQvtBCef8GTQ/7Cj rRQA36d5pyc08W3O/EwCVsPAZzgrlUjx3hjJkZp/CIuyHm5O9ERLqbxGFlx9Ip8q 5ZKyKNBm6U6PPEy3uxgrQhEtwbGzNPtb1qkfnxqN9S5zwVlo8jVgRmfV1QxX7svi NHCFvHGKkp2Qbm+MgV6B2ahWYJ7dnZN6MGzHtSjNmhQWhkF/6NEko2eM1tun8mkL HfiB2/DYt7/M/K9LnsYW9PQAnxYmQsgff3siCEndjwF2bVEWaX0JBjgAlvUbJPFc QFFgFjnJENJyww8upepAHqPdy9Skso4EasbKELbj5DFIyN0II4JwqOGhjSublRaT qrFq+ZCGrx0Z4qWl+tVnhNu1uZkkjc1yH3TcBjqvmrVMJq/zVoswuDCAGf39IrB3 WhtV65zORyFa2F0KsJqpEpr8leUXK9LbN9wSEodoU7RybCbh7TN8KajRdM2q9ySd fkY6Bg4kdRN+fuhgpIeDGH8+uqLcm5yyUPbm3ptyFQO9a8CGJpsTVPEfc3wx69GB dfOKGy2hhEWlbIJDf4oDWs9XKPBJm5KCV3Wq7tp1sXE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb0yv2cgIq22VUFc9Ahw 8GMsL4UI227LCpghxsdHs9lWCu132cuUIZgHVUfbSxUNOPETGdc43Atrdggv03v7 7ntlxOLTyN7K/n1TnaEj75yAtBhLsaOv35cPbmL4/L9H3v7Am8VSniIoPPJlW9uC xNN/6cbDwCwJ4OXPZEr8N8HQ7CdjJclgykTSF+4nqxJAu0ZAb6BeNtjEIHvpaPYi ayFh1/MxAp6oVkFrG/x1Bh0nZrRI1VXRAMBXUo12hCFeZMYrU8qMyPCJPqtcc5tS eXKOUsj8WZPEQq4Qzs7A/sWa7c7fdwJk7OIwjbClfYSzQC5pbXhWxAy++zojovzf hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15146441178535531465662140106920730071 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'displaycdn.lenovo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23952336764546098385078930098321225731791600399868589539226863907991535856577341791904010066379719652964906887578367804157893260365099939607183316631268231598284389335565950889651201835156571919007999727891202758779229735768705701806766429224567757110605699743237635011308851901721902810395370168163204603492955110356280249983238208606817940824212293662054806303715783897818280821685260068850917462821831902185871931222894213183647143094898391556144830416923999336629980210820476765284444585106607213299237641688141658974049582532686118681267318675512221943614752076327575544374742551702434978343098251506603567931269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 429e95669015cabb51eb56859d81de5fa40884e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'displaycdn.lenovo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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