*.cgi-bps.com
- CGI Federal Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0e:2f:61:6d:9f:08:17:7a:76:21:21:b8:dd:9f:8a:6a was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CGI Federal Inc.
Organization:
CGI Federal Inc.
Organization unit: HCP
Organization unit: HCP
State / Province:
OH
Locality: Cleveland
Country: US
Locality: Cleveland
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:2f:61:6d:9f:08:17:7a:76:21:21:b8:dd:9f:8a:6aSerial Number (int): 18855205972159126227632940554689415786
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 63:32:a0:21:4e:02:6a:ea:a7:70:ea:a0:78:c1:ef:9d:ee:75:be:74
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 58:6a:59:7d:4e:52:6d:97:ad:b0:13:07:17:ce:da:38:db:d8:54:38
Fingerprint (sha256): 00:fc:ba:03:78:4e:b1:f4:20:d1:97:b9:d2:69:61:ad:4e:0b:99:5b:93:70:76:7b:c1:02:b6:76:8b:ea:39:4b
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.cgi-bps.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cgi-bps.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cgi-bps.com
cgi-bps.com
demorest.cgi-bps.com
cgi-bps.com
demorest.cgi-bps.com
Other certificates including the domain name cgi-bps.com
(limited to 100 certificates)
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
imax.dr.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
imax.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
imax.dr.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
imax.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
*.cgi-bps.com
Certificate
The complete raw certificate details for *.cgi-bps.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIQDi9hbZ8IF3p2ISG43Z+KajANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODA1MjUwMDAwMDBaFw0yMDA4MTIxMjAwMDBa MG8xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJPSDESMBAGA1UEBxMJQ2xldmVsYW5k MRkwFwYDVQQKExBDR0kgRmVkZXJhbCBJbmMuMQwwCgYDVQQLEwNIQ1AxFjAUBgNV BAMMDSouY2dpLWJwcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzf4u6FwBfZ6fobl0+2D73kUt0vgrA18QuCWdAQ3aFmCSqyakiv0yx6Y1eCIaH UJYDYxuIq1+8RGZflxW7X0qYngQABo6tTQQyxPL/pf8VH+qoaGFWafuOEOJzFpfz TGv/zMfQ9o3UuMI8rMG2GwBNiFenHP3HSKBsfAtnhIBJf3hPv6CDfycqoSllH2UO FjqzSfPYDHkAO6BQ6/u69GoPzVdp3Y0YU0fkD0AZQNuxkRPxtBYgsxI0Q1D/um2C h11s620AHkYXIETqkzlMV4j2cK1+Ux/AytzCJyYf53ZWXKKvXX0cdQlP6VXvOaTi PwMFjY61Idrs8ZyHfjM36XAdAgMBAAGjggOKMIIDhjAfBgNVHSMEGDAWgBRRaP+Q rwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUYzKgIU4CauqncOqgeMHvne51vnQw OwYDVR0RBDQwMoINKi5jZ2ktYnBzLmNvbYILY2dpLWJwcy5jb22CFGRlbW9yZXN0 LmNnaS1icHMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNl cnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDovL2NybDQu ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAERTBDMDcG CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j b20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhho dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNl cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVy Q0EuY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1 AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABY5eRdfcAAAQDAEYw RAIgMYsLuA8+Ku5yW0b3Bxp9sl29B0GinoItk+Yg12dQ2PYCIFTuHQ2ZQkhznUgU 0GD8oqAAy1NSGe6s1eljDeNoeap7AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVg wbTq/16ggw8AAAFjl5F2vQAABAMARzBFAiEAmE7+HPf0x4qCOhzjKR/UWudyzTht 361OlYAVl2TAV2oCIF1d/twbWT99IZwieX9DnLLB0865T29UFW6blPZQN1adAHYA u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFjl5F1+QAABAMARzBF AiEA47Iqa+EAsHoFvJBceM4cNwcxhiqJADQywBpls2k6HYECIDz+VpBfnOdJ5EeV o1wv8HAomJRrNIKm1Hv8t96w4Pl/MA0GCSqGSIb3DQEBCwUAA4IBAQChJWONKJZa wgxCzX/3YgZthr3xaVUc5cT2PvryMUyPVe9+U00M4RnqfNBGpFfV2LElObgC7kM2 GB9Vgke9jM7yCnBr0xEKCZIcoVnZVu5/gED4K1LqVednkX/Y3r9WO1N+D/Ti7HKz GNezQiE+HYb5Bu6r0Sy2moBeV57EXT756KwLZrHqP8DTKnzsyRmWdspgo5bkczYY 4EHfKo2oscvAsy572nkUk6Ad43OvinfcykLUyT4GOsRn+pUQHJ77WnkTgFmmAGqr DWPaTZPR252j6lhXvpwIcM67fp9r7CgT9wn5BQPH8H0B4OoU85IhLmaZPxskBoeX IXKaRUNbDncj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3+LuhcAX2en6G5dPtg+ 95FLdL4KwNfELglnQEN2hZgkqsmpIr9MsemNXgiGh1CWA2MbiKtfvERmX5cVu19K mJ4EAAaOrU0EMsTy/6X/FR/qqGhhVmn7jhDicxaX80xr/8zH0PaN1LjCPKzBthsA TYhXpxz9x0igbHwLZ4SASX94T7+gg38nKqEpZR9lDhY6s0nz2Ax5ADugUOv7uvRq D81Xad2NGFNH5A9AGUDbsZET8bQWILMSNENQ/7ptgoddbOttAB5GFyBE6pM5TFeI 9nCtflMfwMrcwicmH+d2Vlyir119HHUJT+lV7zmk4j8DBY2OtSHa7PGch34zN+lw HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18855205972159126227632940554689415786 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cleveland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CGI Federal Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HCP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cgi-bps.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22659551771110950302482006901606439509063860667569453648993557972671389928306304342003194977159592687042025326904234646434458146215999951070325403012064961842997047594390112511260518279279529213148871467208871938915394971779689647579813409201965357656159507481330750095130750361213162383966601277010449510083809633817019715301008208436375320067185374265158302721951640691567503499788698877088655839717107904629523041268543422307371773615270901545660964919794676601586606692767187881527188270472643916050775688895821717536340360166196530455363130675544176537765857781200292182118063769335021391650238880027471640096797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6332a0214e026aeaa770eaa078c1ef9dee75be74 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgi-bps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgi-bps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demorest.cgi-bps.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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