ctdcinc.com
Issued by Encryption Everywhere DV TLS CA - G2
About this certificate
This digital certificate with serial number 05:01:e5:01:c4:ca:85:6d:e8:19:85:df:ec:91:36:39 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ctdcinc.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:01:e5:01:c4:ca:85:6d:e8:19:85:df:ec:91:36:39Serial Number (int): 6655977087714407981646647460331861561
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 1f:fe:d2:f2:e1:ae:2d:33:73:1c:1b:11:e7:8a:24:e6:da:79:f9:66
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6
Fingerprint (sha1): f3:a7:53:a6:65:5a:d5:7f:be:26:01:5e:ae:3a:fc:ff:24:5e:73:f2
Fingerprint (sha256): 00:eb:76:f1:10:85:2c:1b:d3:ad:eb:fd:eb:9b:13:4d:8f:14:1a:63:90:ff:5c:ac:f4:f2:6c:52:2e:4e:05:90
Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCheck the revocation status for certificate ctdcinc.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ctdcinc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ctdcinc.com
www.ctdcinc.com
www.ctdcinc.com
Other certificates including the domain name ctdcinc.com
(limited to 100 certificates)
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.adrenalineit.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
pm.ed.sa
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
projects.ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
pm.xcelagency.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
pm.ed.sa
projects.ragingsanity.com
projects.ragingsanity.com
projects.roccospace.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
projects.hammersmithyyc.com
ctdcinc.com
projects.rkellp.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.corrinnearmour.com
projects.digital-studios.ca
projects.ragingsanity.com
projects.ragingsanity.com
projects.brandalaxy.com
ctdcinc.com
projects.corrinnearmour.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.hammersmithyyc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.mello.co.nz
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.adrenalineit.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
pm.ed.sa
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
projects.ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
pm.xcelagency.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
pm.ed.sa
projects.ragingsanity.com
projects.ragingsanity.com
projects.roccospace.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
projects.hammersmithyyc.com
ctdcinc.com
projects.rkellp.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.corrinnearmour.com
projects.digital-studios.ca
projects.ragingsanity.com
projects.ragingsanity.com
projects.brandalaxy.com
ctdcinc.com
projects.corrinnearmour.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.hammersmithyyc.com
ctdcinc.com
ctdcinc.com
ctdcinc.com
projects.ragingsanity.com
ctdcinc.com
projects.ragingsanity.com
projects.ragingsanity.com
projects.mello.co.nz
ctdcinc.com
ctdcinc.com
ctdcinc.com
Certificate
The complete raw certificate details for ctdcinc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIQBQHlAcTKhW3oGYXf7JE2OTANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg RFYgVExTIENBIC0gRzIwHhcNMTcxMjMwMDAwMDAwWhcNMTgxMjMwMTIwMDAwWjAW MRQwEgYDVQQDEwtjdGRjaW5jLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMCXhbxxIrMV8VpKVjGynh362LuCsDBln0WGd6h/KuBCT2LTS3OlCX1d ZupkD105610vk7sOZSJ7r6c8SR7WqVbEWulPsaF0DlL/7cNEZOWQQWBxDP0plB2J m7GtJ4SELU+yp1HIoFLQzpQVhauiiwIoTUCXVWJYj0q0WPYwAeuCXtdrPJzDmyM6 N6R9gSW4H3XUpRHF+LmbHfDO4y+fZkCl1J1bh5jeGwXQcu9td0+rIXo6IYZazLw2 gne2HV1lX/n/ENTyVf+g7jULGnQyFjCJ6OoiB9MstvrPnEmhQ7hJQNk1EibZ4xzK CcK2Uo5x5wAbGByhu+nPk2u6xQZIxysCAwEAAaOCAoAwggJ8MB8GA1UdIwQYMBaA FHjfkZBf7t6s9sV169VMVVPvJEq2MB0GA1UdDgQWBBQf/tLy4a4tM3McGxHniiTm 2nn5ZjAnBgNVHREEIDAeggtjdGRjaW5jLmNvbYIPd3d3LmN0ZGNpbmMuY29tMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYD VR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwgYAGCCsGAQUFBwEBBHQwcjAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEoGCCsGAQUFBzAChj5o dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRW5jcnlwdGlvbkV2ZXJ5d2hlcmVE VlRMU0NBLUcyLmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFgp6anFwAABAMA RzBFAiA7bh4Z/e169q7E3PGo851TfGVuECwtMgpIlZEX2CLSYQIhAIMldWeqH9xh W3WFdUfFLTO/1RkQGKGg5+QrUWpelkjgAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/ SrVgwbTq/16ggw8AAAFgp6anYAAABAMARzBFAiEAnEd6Zy/3j/ICQkW6rkBFTzdD H4rhwpKG2XhNXo0XEcACIEUb6zhhs5YJX41/mkXQQ7cyKP7MPScl/9h8zJjSFrWa MA0GCSqGSIb3DQEBCwUAA4IBAQAmaqV4LZtGz1o4C1/3pnEsunphVp8WzLQJXKl8 rh7Tvl/GsHIzDTncTsKBuWgZnJ6Kan6kQvCmkGep8b/NaC7PBd5eegKmWIEvrISO 1hgOUtr3SpOCUv5xDap1ENUaN7rVbuCD2tRF/yRivBI93uS6vSc3byprm5Y8wkvc 5Sxy45qdnHylCenmT1QLwWf6AYNOuReMpurW5lPXs4XSqpCZWRmNP7GHSoRHOVip ORVgSdFU7H+h1dPSIOWrkTzz3EM1rImSymd+h6eNXQQ3o5MjRF3Lkuj4VBOn5uGE 7AR2nsdnNLHJEtq5IgKk9MxpKf++iFINxW5WVJziWm+KCyve -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJeFvHEisxXxWkpWMbKe HfrYu4KwMGWfRYZ3qH8q4EJPYtNLc6UJfV1m6mQPXTnrXS+Tuw5lInuvpzxJHtap VsRa6U+xoXQOUv/tw0Rk5ZBBYHEM/SmUHYmbsa0nhIQtT7KnUcigUtDOlBWFq6KL AihNQJdVYliPSrRY9jAB64Je12s8nMObIzo3pH2BJbgfddSlEcX4uZsd8M7jL59m QKXUnVuHmN4bBdBy7213T6shejohhlrMvDaCd7YdXWVf+f8Q1PJV/6DuNQsadDIW MIno6iIH0yy2+s+cSaFDuElA2TUSJtnjHMoJwrZSjnHnABsYHKG76c+Ta7rFBkjH KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6655977087714407981646647460331861561 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctdcinc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24312473036996290825259747366093692998598480059676525389096183743060719768785938649931778978451797107536005828916234065493556467904548275013718189940154297571868312510539848048904164457810861896984759591723082220531376562201137578845078663200416167531405656832979975918285833980564620773593329576887276357085430538425147802604987005895649898501796043219517234141191203539000807445336053373220373799422038811020395010903934560135777561273989262375745868236113222434443258501886962529395754835750882694239712795732022398576839566496070532581487715178357929578386537384636048465780908264759993437976966918292333797099307 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ffed2f2e1ae2d33731c1b11e78a24e6da79f966 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctdcinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctdcinc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000160a7a6a717000004030047304502203b6e1e19fded7af6aec4dcf1a8f39d537c656e102c2d320a48959117d822d26102210083257567aa1fdc615b75857547c52d33bfd5191018a1a0e7e42b516a5e9648e00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000160a7a6a76000000403004730450221009c477a672ff78ff2024245baae40454f37431f8ae1c29286d9784d5e8d1711c00220451beb3861b396095f8d7f9a45d043b73228fecc3d2725ffd87ccc98d216b59a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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