domains.returnly.com
- Returnly Technologies, Inc -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0a:ca:4d:8b:2a:64:b5:e5:2e:f2:0d:29:27:e4:7f:af was issued on by DigiCert Inc.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Returnly Technologies, Inc
Organization:
Returnly Technologies, Inc
State / Province:
CA
Locality: San Rafael
Country: US
Locality: San Rafael
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:ca:4d:8b:2a:64:b5:e5:2e:f2:0d:29:27:e4:7f:afSerial Number (int): 14342696694647386541845329131969216431
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2c:61:28:90:00:4a:aa:95:ce:4e:20:18:fd:dd:18:ab:b1:46:a0:41
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 25:0e:23:6b:51:0b:e5:81:be:c5:5a:31:9b:83:5d:83:c7:0e:d1:0d
Fingerprint (sha256): 00:cb:26:69:ca:34:7c:4b:23:28:f3:ca:fd:b4:60:bb:38:75:da:8c:d5:69:7d:0e:ec:4a:5d:ed:7e:c9:08:87
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl
Check the revocation status for certificate domains.returnly.com
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for domains.returnly.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
domains.returnly.com
returns.marinelayer.com
returns.fansedge.com
returns.fanatics.com
returns-web.returnly.com
returns.kithnyc.com
returns.parachutehome.com
returns.stagprovisions.com
returns.bollandbranch.com
returns.nobullproject.com
returns.goop.com
returns.nascar.com
returns.mlbshop.com
returns.unitedworldsoccer.com
returns.shopgreybox.com
returns.lighterusa.com
returns.nflshop.com
returns.marinelayer.com
returns.fansedge.com
returns.fanatics.com
returns-web.returnly.com
returns.kithnyc.com
returns.parachutehome.com
returns.stagprovisions.com
returns.bollandbranch.com
returns.nobullproject.com
returns.goop.com
returns.nascar.com
returns.mlbshop.com
returns.unitedworldsoccer.com
returns.shopgreybox.com
returns.lighterusa.com
returns.nflshop.com
Other certificates including the domain name returnly.com
(limited to 100 certificates)
domains.returnly.com
secure0121.hubspot.com
returnly.com
returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
sni.cloudflaressl.com
returnly.com
returnly.com
domains.returnly.com
domains.returnly.com
*.returnly.com
storefront-widget.returnly.com
storefront-widget.returnly.com
domains.returnly.com
returnly.com
secure0121.hubspot.com
blog.returnly.com
api-documentation.returnly.com
blog.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
secure0121.hubspot.com
blog.returnly.com
secure0121.hubspot.com
blog.returnly.com
info.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
returnly.com
*.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
domains.returnly.com
storefront-widget.returnly.com
domains.returnly.com
*.returnly.com
www.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
cf-ingress.returnly.com
blog.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
blog.returnly.com
returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
sni.cloudflaressl.com
blog.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
blog.returnly.com
info.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
secure0121.hubspot.com
returnly.com
returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
sni.cloudflaressl.com
returnly.com
returnly.com
domains.returnly.com
domains.returnly.com
*.returnly.com
storefront-widget.returnly.com
storefront-widget.returnly.com
domains.returnly.com
returnly.com
secure0121.hubspot.com
blog.returnly.com
api-documentation.returnly.com
blog.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
secure0121.hubspot.com
blog.returnly.com
secure0121.hubspot.com
blog.returnly.com
info.returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
returnly.com
*.returnly.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
domains.returnly.com
storefront-widget.returnly.com
domains.returnly.com
*.returnly.com
www.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
cf-ingress.returnly.com
blog.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
domains.returnly.com
secure0121.hubspot.com
blog.returnly.com
returnly.com
*.returnly.com
info.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
sni.cloudflaressl.com
blog.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
blog.returnly.com
info.returnly.com
*.returnly.com
domains.returnly.com
info.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
*.returnly.com
domains.returnly.com
changelog.returnly.com
returnly.com
returnly.com
returnly.com
secure0121.hubspot.com
*.returnly.com
domains.returnly.com
secure0121.hubspot.com
*.returnly.com
*.returnly.com
*.returnly.com
blog.returnly.com
Certificate
The complete raw certificate details for domains.returnly.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgIQCspNiypkteUu8g0pJ+R/rzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUxMTA2MDAwMDAwWhcN MTYxMTEwMTIwMDAwWjBzMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExEzARBgNV BAcTClNhbiBSYWZhZWwxIzAhBgNVBAoTGlJldHVybmx5IFRlY2hub2xvZ2llcywg SW5jMR0wGwYDVQQDExRkb21haW5zLnJldHVybmx5LmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMmBDNIP6Fep0XlSBesZhiqpPDxlEMzu5PlP47OQ IrjkpwCtpPRDmmvaehPlZloskbRTOBUC6IRwVuytl+8s0T2wjMWTS8p1l/AyFOda YDwT9uxZF1Yz2kGqoAcCGgDVNf5AKf102t1Jq4PDVQV2AoyFH8AmN2wMX8C0RKtr 4qyeYSeVtRtqugmMflEpnAl5BFxaI/4k7K9dL1TVc84KkTtieaxSI+lRmB5HNbir 2WsbLMZ6Ek/ZOcVLgTk6NbHWZP2zTc2QY2I9L/Vv0+TbF5jzuGm1B6K81xeTTcFp /s1RpVMInL7/oovWRzsQ4RcqTjSQyg6ETfBPMWKm+E7T3eMCAwEAAaOCA2IwggNe MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBQsYSiQ AEqqlc5OIBj93RirsUagQTCCAaQGA1UdEQSCAZswggGXghRkb21haW5zLnJldHVy bmx5LmNvbYIXcmV0dXJucy5tYXJpbmVsYXllci5jb22CFHJldHVybnMuZmFuc2Vk Z2UuY29tghRyZXR1cm5zLmZhbmF0aWNzLmNvbYIYcmV0dXJucy13ZWIucmV0dXJu bHkuY29tghNyZXR1cm5zLmtpdGhueWMuY29tghlyZXR1cm5zLnBhcmFjaHV0ZWhv bWUuY29tghpyZXR1cm5zLnN0YWdwcm92aXNpb25zLmNvbYIZcmV0dXJucy5ib2xs YW5kYnJhbmNoLmNvbYIZcmV0dXJucy5ub2J1bGxwcm9qZWN0LmNvbYIQcmV0dXJu cy5nb29wLmNvbYIScmV0dXJucy5uYXNjYXIuY29tghNyZXR1cm5zLm1sYnNob3Au Y29tgh1yZXR1cm5zLnVuaXRlZHdvcmxkc29jY2VyLmNvbYIXcmV0dXJucy5zaG9w Z3JleWJveC5jb22CFnJldHVybnMubGlnaHRlcnVzYS5jb22CE3JldHVybnMubmZs c2hvcC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5j b20vc3NjYS1zaGEyLWc1LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL3NzY2Etc2hhMi1nNS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB AgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv bS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADAN BgkqhkiG9w0BAQsFAAOCAQEAJPLBXlsI1zPhM63qK05yCpX748L85u9SlhmRSq5b zNfiWdtLqD86VZdibK6CK+P5QJvSIa1p3LoPuiE/mlU1MtqNUDhKJYLzWupQiJmN Q3cWp9YMxgjtgRenkXWIIxD3f8B3eemgp/Gm/ZregjttCRSbc8Ejh+isO6DuABxY JZIkMnSem13HAfmMos5EA1WUGb5IbhIpNEqE5Zc7OeiYFnO6fB2LnAcR2A5hRQr/ S5z9em+okCfGdhTrGBNqcyd8wTvXnzbz3L/6SpEweS6FoLz6XWAKwsi3AfVb4WJu m+Nde0C9WGtatd3jXFo2ceXP4ppiuWdZEp1+3wgVLF7+cQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYEM0g/oV6nReVIF6xmG Kqk8PGUQzO7k+U/js5AiuOSnAK2k9EOaa9p6E+VmWiyRtFM4FQLohHBW7K2X7yzR PbCMxZNLynWX8DIU51pgPBP27FkXVjPaQaqgBwIaANU1/kAp/XTa3Umrg8NVBXYC jIUfwCY3bAxfwLREq2virJ5hJ5W1G2q6CYx+USmcCXkEXFoj/iTsr10vVNVzzgqR O2J5rFIj6VGYHkc1uKvZaxssxnoST9k5xUuBOTo1sdZk/bNNzZBjYj0v9W/T5NsX mPO4abUHorzXF5NNwWn+zVGlUwicvv+ii9ZHOxDhFypONJDKDoRN8E8xYqb4TtPd 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14342696694647386541845329131969216431 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Rafael' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Returnly Technologies, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domains.returnly.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25437536264552907359686471566908762753837786585272213532765590482626941438835022021956390846163384694305295002756460847484699672147871717381065889796418113911729152867754679217764452598207370511306668568842901203945424572396817837724252520541765544222306719794348649102271173341035582466522776690141253193663759181048006338814460987966352130976195481865515405219692504095644924895469442261240480053531903775969073632331847525992568718457750612979947175129811100021712261998980969056287982142675893617688051557889045057579443754093189351848895563904684340926076443646396741738754521560980326792995133246070339505741283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c612890004aaa95ce4e2018fddd18abb146a041 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (411 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domains.returnly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.marinelayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.fansedge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.fanatics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns-web.returnly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.kithnyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.parachutehome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.stagprovisions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.bollandbranch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.nobullproject.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.goop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.nascar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.mlbshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.unitedworldsoccer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.shopgreybox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.lighterusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returns.nflshop.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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