api-qa.united.com
- United Airlines Inc -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 06:38:61:03:8c:05:9d:bc:d3:ee:cf:9f:f9:03:7b:d8 was issued on by DigiCert Inc.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
United Airlines Inc
Organization:
United Airlines Inc
State / Province:
Illinois
Locality: Arlington Heights
Country: US
Locality: Arlington Heights
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:38:61:03:8c:05:9d:bc:d3:ee:cf:9f:f9:03:7b:d8Serial Number (int): 8268104273538178238328136651606555608
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 0b:b0:20:43:39:9f:cc:95:ba:b2:41:19:5a:32:2b:dc:82:d2:8e:dc
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): ef:f9:ff:39:7f:4c:7c:bf:fd:26:74:02:81:8e:56:1c:af:70:28:f1
Fingerprint (sha256): 01:26:0c:87:7b:9b:f5:ed:ce:cf:0f:aa:2d:31:51:d0:91:e3:53:92:1b:89:8f:ce:cc:de:3e:ff:db:4c:ff:51
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl
Check the revocation status for certificate api-qa.united.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api-qa.united.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-qa.united.com
aws.qagw.api.united.com
aws.preprodgw.api.united.com
aws.oh.stagegw.api.united.com
aws.oh.qagw.api.united.com
aws.oh.preprodgw.api.united.com
aws.oh.prdgw.api.united.com
aws.oh.devgw.api.united.com
aws.devgw.api.united.com
aws.qagw.api.united.com
aws.preprodgw.api.united.com
aws.oh.stagegw.api.united.com
aws.oh.qagw.api.united.com
aws.oh.preprodgw.api.united.com
aws.oh.prdgw.api.united.com
aws.oh.devgw.api.united.com
aws.devgw.api.united.com
Other certificates including the domain name united.com
(limited to 100 certificates)
eres.app.stage.auth.united.com
vss.united.com
rebelmouse.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
wheelchair.united.com
wftest.united.com
trk.notify.hotels.united.com
gofly.united.com
partnergw-csmc.united.com
business2.united.com
cardmemberoffers.united.com
iot-qa.united.com
api-qa.united.com
packages.united.com
commerce.united.com
svcgw.qa.aws.united.com
skyfi.united.com
meetings.united.com
checkin.united.com
rebelmouse.map.fastly.net
meetings.united.com
accessedge.united.com
cardmemberoffers.united.com
alpha.vacations.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
aws.qa.webauth.united.com
wheelchair-qa.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
ndcxway1.united.com
classified.united.com
vacations.united.com
premierevents.united.com
cardmemberoffers.united.com
uma.united.com
dev.mystatus.united.com
ebso.ual.com
rebelmouse.map.fastly.net
luxury.vacations.united.com
stage.united.com
businesstravel.united.com
qa7.united.com
ivr-qa.ual.com
newsroom.united.com
dns-vetting1-jeffg-noah.map.fastly.net
www.de.hotels.united.com
rebelmouse.map.fastly.net
qa.united.com
lyncdiscover.united.com
offers.united.com
crreport-dev.united.com
rebelmouse.map.fastly.net
san-14-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
vacations.united.com
united.com
schedulep.united.com
qol-mffqa.united.com
eres.app.stage.auth.united.com
meetings.united.com
vacations.united.com
xml.united.com
san-34-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
inflight-mff.united.com
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
ualapi.united.com
eservicetest.united.com
dns-vetting1-jeffg-noah.map.fastly.net
assets.mystatus.united.com
wf.united.com
signatures.united.com
unitedperksplus.united.com
svcgw.prd.aws.united.com
rebelmouse.map.fastly.net
mobile-test.united.com
view.enews.united.com
uabusiness.united.com
vacations.united.com
dtm.cc.cruises.united.com
ucbadm.stage.united.com
click.e.united.com
alg-prod.actioniq.mr-in.com
booking.vacations.united.com
rebelmouse.map.fastly.net
walletservices.united.com
rebelmouse.map.fastly.net
api-qa.united.com
cruises.united.com
easyupdate.united.com
united.com
united.com
connections.united.com
cargo-iot.dev.ual.com
smartphone.united.com
packages.united.com
uabusiness.united.com
vss.united.com
rebelmouse.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
wheelchair.united.com
wftest.united.com
trk.notify.hotels.united.com
gofly.united.com
partnergw-csmc.united.com
business2.united.com
cardmemberoffers.united.com
iot-qa.united.com
api-qa.united.com
packages.united.com
commerce.united.com
svcgw.qa.aws.united.com
skyfi.united.com
meetings.united.com
checkin.united.com
rebelmouse.map.fastly.net
meetings.united.com
accessedge.united.com
cardmemberoffers.united.com
alpha.vacations.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
aws.qa.webauth.united.com
wheelchair-qa.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
ndcxway1.united.com
classified.united.com
vacations.united.com
premierevents.united.com
cardmemberoffers.united.com
uma.united.com
dev.mystatus.united.com
ebso.ual.com
rebelmouse.map.fastly.net
luxury.vacations.united.com
stage.united.com
businesstravel.united.com
qa7.united.com
ivr-qa.ual.com
newsroom.united.com
dns-vetting1-jeffg-noah.map.fastly.net
www.de.hotels.united.com
rebelmouse.map.fastly.net
qa.united.com
lyncdiscover.united.com
offers.united.com
crreport-dev.united.com
rebelmouse.map.fastly.net
san-14-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
vacations.united.com
united.com
schedulep.united.com
qol-mffqa.united.com
eres.app.stage.auth.united.com
meetings.united.com
vacations.united.com
xml.united.com
san-34-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
inflight-mff.united.com
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
ualapi.united.com
eservicetest.united.com
dns-vetting1-jeffg-noah.map.fastly.net
assets.mystatus.united.com
wf.united.com
signatures.united.com
unitedperksplus.united.com
svcgw.prd.aws.united.com
rebelmouse.map.fastly.net
mobile-test.united.com
view.enews.united.com
uabusiness.united.com
vacations.united.com
dtm.cc.cruises.united.com
ucbadm.stage.united.com
click.e.united.com
alg-prod.actioniq.mr-in.com
booking.vacations.united.com
rebelmouse.map.fastly.net
walletservices.united.com
rebelmouse.map.fastly.net
api-qa.united.com
cruises.united.com
easyupdate.united.com
united.com
united.com
connections.united.com
cargo-iot.dev.ual.com
smartphone.united.com
packages.united.com
uabusiness.united.com
Certificate
The complete raw certificate details for api-qa.united.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgIQBjhhA4wFnbzT7s+f+QN72DANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjEwODEwMDAwMDAwWhcN MjIwODEwMjM1OTU5WjB2MQswCQYDVQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMx GjAYBgNVBAcTEUFybGluZ3RvbiBIZWlnaHRzMRwwGgYDVQQKExNVbml0ZWQgQWly bGluZXMgSW5jMRowGAYDVQQDExFhcGktcWEudW5pdGVkLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAO9VnLAPFYvs+lmT/KdxeWxKQuAZQK9OWwbc 5iCL/dZjP4sIslmwYvd00rxVUXmhyfB/qkJ9nqhqQZGyyqVe+olpA4SqWjntzpMY s/knFg2J50BYLanM2H9gl5SkGv48sBMEetEfB+pP089BqFG4myHejcFgLO1eIc4+ bBXkRxskrTyaFYIlCMZgMBZ+Aw2pFaPY3PsrfHqDfJN9WhH9Vw+eYHd5ljfeCf4Y 86efDb+n0YNpGPpawypo6qHnNPVxgZHYLGr0v2O5An/HzhkznbvYafwRct22zbRX oetmgA6M876SQDrFHgNBtNQBSbwAGFjgW/j0Fj7qpxiz9vLmylUCAwEAAaOCAsow ggLGMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBQL sCBDOZ/MlbqyQRlaMivcgtKO3DCCAQUGA1UdEQSB/TCB+oIRYXBpLXFhLnVuaXRl ZC5jb22CF2F3cy5xYWd3LmFwaS51bml0ZWQuY29tghxhd3MucHJlcHJvZGd3LmFw aS51bml0ZWQuY29tgh1hd3Mub2guc3RhZ2Vndy5hcGkudW5pdGVkLmNvbYIaYXdz Lm9oLnFhZ3cuYXBpLnVuaXRlZC5jb22CH2F3cy5vaC5wcmVwcm9kZ3cuYXBpLnVu aXRlZC5jb22CG2F3cy5vaC5wcmRndy5hcGkudW5pdGVkLmNvbYIbYXdzLm9oLmRl dmd3LmFwaS51bml0ZWQuY29tghhhd3MuZGV2Z3cuYXBpLnVuaXRlZC5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNV HR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEy LWc3LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hh Mi1nNy5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0 cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRw Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVy Q0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAJvz2G5G4eRzIMs5xuGsjHGlaQHT4QX71G4INWqfJsN8mCGI i3hvqHrSq1tAIxuKTtJOM9Pev80EI39R8I8ibqoxOE2OOzm0/O7F4USQbTHu1pKC KHPgqSTEo6e1Vvi+vVfpgddVWhOyA4gWxIXCbqCjnG9pXgzOEybbK2g5khkyYzt3 OJ1CGAmDoYPeZcWdIoYLF1CIpBSvV0Plgw0/fGNbWte6mW4+7f3MpwvrfyrlvwYO shX6fAeAHnZZLvJwzmQ8uquEFh05vyTuWmHniLCRcyfF0N54yg6ApSmZysWHa6jr H0PbVeaW16fMqy3jxg7yRmsUDgh+1aUzXoNZQfw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71WcsA8Vi+z6WZP8p3F5 bEpC4BlAr05bBtzmIIv91mM/iwiyWbBi93TSvFVReaHJ8H+qQn2eqGpBkbLKpV76 iWkDhKpaOe3Okxiz+ScWDYnnQFgtqczYf2CXlKQa/jywEwR60R8H6k/Tz0GoUbib Id6NwWAs7V4hzj5sFeRHGyStPJoVgiUIxmAwFn4DDakVo9jc+yt8eoN8k31aEf1X D55gd3mWN94J/hjzp58Nv6fRg2kY+lrDKmjqoec09XGBkdgsavS/Y7kCf8fOGTOd u9hp/BFy3bbNtFeh62aADozzvpJAOsUeA0G01AFJvAAYWOBb+PQWPuqnGLP28ubK VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8268104273538178238328136651606555608 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arlington Heights' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Airlines Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-qa.united.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30213171767831714714300400744716770944708616366164977862417977674210636183831288294328768792277165511308940891626269088709329227717609965687715172025252686300006525208911765832782122202419977605282429468433006917461653864793147979091296058211507850058749142269947865958759979987866052525076969076315141290441504595486839842458490106353571736024152605424606430923358536798787995695215476761183478220732032607961407033021465029357445533461391182932736388506826827816136354013766484637811080284819490174896322349647996456324046704204546395938837005121894909042668642082773266167430389909532197161144656607863203818818133 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0bb02043399fcc95bab241195a322bdc82d28edc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.qagw.api.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.preprodgw.api.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.oh.stagegw.api.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.oh.qagw.api.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.oh.preprodgw.api.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.oh.prdgw.api.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.oh.devgw.api.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.devgw.api.united.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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