aem-cloud.corp.prod.blu.digicert.com
- DigiCert, Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 04:f9:78:8b:c3:6d:30:9b:2b:3a:d1:19:ba:8a:6d:38 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DigiCert, Inc.
Company registration number:
5299537-0142
Organization: DigiCert, Inc.
Organization unit: BOM
Organization: DigiCert, Inc.
Organization unit: BOM
State / Province:
Utah
Locality: Lehi
Country: US
Locality: Lehi
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f9:78:8b:c3:6d:30:9b:2b:3a:d1:19:ba:8a:6d:38Serial Number (int): 6612238863263442619764945149900778808
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 15:71:53:80:51:a5:42:93:3f:94:a9:0d:45:e7:61:1d:91:fb:81:f6
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): d3:45:c8:3d:87:8d:72:de:d1:2f:9a:ca:48:ff:bc:45:e0:c2:78:90
Fingerprint (sha256): 01:31:17:56:9a:07:7c:fb:cb:71:74:85:49:61:c2:43:f1:70:f5:a7:fc:c7:64:6a:24:d7:92:9e:01:ee:3d:3d
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate aem-cloud.corp.prod.blu.digicert.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aem-cloud.corp.prod.blu.digicert.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aem-cloud.corp.prod.blu.digicert.com
www.aem-cloud.corp.prod.blu.digicert.com
www.aem-cloud.corp.prod.blu.digicert.com
Other certificates including the domain name digicert.com
(limited to 100 certificates)
www.digicert.com
Q1LXCLPM02.dev.blu.digicert.com
blu-infra-nclu.dc.digicert.com
digicert-rsa4096-root-g5-expired.chain-demos.digicert.com
shoppingguarantee.digicert.com
summit.digicert.com
statuspage.io
www.digicert.com
Q2LXDCTM01.blu.dc.digicert.com
U1WIADSDC01.blu.dc.digicert.com
sabrxdev.corp.dev.blu.digicert.com
DigiCert, Inc.
partnernews.digicert.com
statuspage.io
statuspage.io
www.digicert.com
aem-cloud.corp.prod.blu.digicert.com
statuspage.io
nettest1.int.gw.digicert.com
seal.digicert.com
digicert-ecc-p384-root-g5.chain-demos.digicert.com
smtp.digicert.com
wsus.corp.digicert.com
quovadis-root-ca-3-g3.chain-demos.digicert.com
statuspage.io
global-root-g2.chain-demos.digicert.com
*.ssltools.digicert.com
statuspage.io
statuspage.io
statuspage.io
trusted-root-g4.chain-demos.digicert.com
cybertrust-global-root-revoked.chain-demos.digicert.com
leh.int.gw.digicert.com
mou.ext.gw.digicert.com
sso.websecurity.digicert.com
statuspage.io
quovadis-root-ca-3-revoked.chain-demos.digicert.com
onsiteipsec.pki.digicert.com
statuspage.io
manageengine.corp.digicert.com
statuspage.io
cds3.cvent.com
cybertrust-global-root.chain-demos.digicert.com
repo.slc.digicert.com
ebsdev.corp.dev.blu.digicert.com
smtp.digicert.com
trusted-root-g4-expired.chain-demos.digicert.com
trusted-root-g4.chain-demos.digicert.com
nettest1.int.gw.digicert.com
quovadis-root-ca-1-g3-revoked.chain-demos.digicert.com
statuspage.io
statuspage.io
*.chain-demos.digicert.com
statuspage.io
www.digicert.com
assured-id-root-g2.digicert.com
statuspage.io
dub.ext.gw.digicert.com
statuspage.io
statuspage.io
mel2.ext.gw.digicert.com
statuspage.io
www.digicert.com
chain-demos.digicert.com
verizon-global-root-ca.chain-demos.digicert.com
statuspage.io
M2WIADSDC02.mel.dc.digicert.com
updates.digicert.com
trusted-root-g4.digicert.com
admin.digicert.com
*.ct.digicert.com
statuspage.io
clientauth.demo.one.nl.digicert.com
cc-admin.websecurity.digicert.com
ft3-cc-admin.websecurity.digicert.com
cybertrust-global-root.chain-demos.digicert.com
trusted-root-g4-revoked.chain-demos.digicert.com
rancher.blu.digicert.com
one.digicert.com
images.shoppingguarantee.digicert.com
ECA1WIDB01.DCAPROD.DIGICERT.COM
resources.digicert.com
statuspage.io
images.updates.digicert.com
cds3.cvent.com
status-wrapper.digicert.com
statuspage.io
U1WIADSMDC01.dc.digicert.com
statuspage.io
statuspage.io
assured-id-root-g3-expired.chain-demos.digicert.com
LE1WIADSMDC02.corp.digicert.com
smetrics.digicert.com
statuspage.io
intra.digicert.com
assured-id-root-ca.chain-demos.digicert.com
veeam-azure.dc.digicert.com
ev-root.chain-demos.digicert.com
statuspage.io
statuspage.io
Q1LXCLPM02.dev.blu.digicert.com
blu-infra-nclu.dc.digicert.com
digicert-rsa4096-root-g5-expired.chain-demos.digicert.com
shoppingguarantee.digicert.com
summit.digicert.com
statuspage.io
www.digicert.com
Q2LXDCTM01.blu.dc.digicert.com
U1WIADSDC01.blu.dc.digicert.com
sabrxdev.corp.dev.blu.digicert.com
DigiCert, Inc.
partnernews.digicert.com
statuspage.io
statuspage.io
www.digicert.com
aem-cloud.corp.prod.blu.digicert.com
statuspage.io
nettest1.int.gw.digicert.com
seal.digicert.com
digicert-ecc-p384-root-g5.chain-demos.digicert.com
smtp.digicert.com
wsus.corp.digicert.com
quovadis-root-ca-3-g3.chain-demos.digicert.com
statuspage.io
global-root-g2.chain-demos.digicert.com
*.ssltools.digicert.com
statuspage.io
statuspage.io
statuspage.io
trusted-root-g4.chain-demos.digicert.com
cybertrust-global-root-revoked.chain-demos.digicert.com
leh.int.gw.digicert.com
mou.ext.gw.digicert.com
sso.websecurity.digicert.com
statuspage.io
quovadis-root-ca-3-revoked.chain-demos.digicert.com
onsiteipsec.pki.digicert.com
statuspage.io
manageengine.corp.digicert.com
statuspage.io
cds3.cvent.com
cybertrust-global-root.chain-demos.digicert.com
repo.slc.digicert.com
ebsdev.corp.dev.blu.digicert.com
smtp.digicert.com
trusted-root-g4-expired.chain-demos.digicert.com
trusted-root-g4.chain-demos.digicert.com
nettest1.int.gw.digicert.com
quovadis-root-ca-1-g3-revoked.chain-demos.digicert.com
statuspage.io
statuspage.io
*.chain-demos.digicert.com
statuspage.io
www.digicert.com
assured-id-root-g2.digicert.com
statuspage.io
dub.ext.gw.digicert.com
statuspage.io
statuspage.io
mel2.ext.gw.digicert.com
statuspage.io
www.digicert.com
chain-demos.digicert.com
verizon-global-root-ca.chain-demos.digicert.com
statuspage.io
M2WIADSDC02.mel.dc.digicert.com
updates.digicert.com
trusted-root-g4.digicert.com
admin.digicert.com
*.ct.digicert.com
statuspage.io
clientauth.demo.one.nl.digicert.com
cc-admin.websecurity.digicert.com
ft3-cc-admin.websecurity.digicert.com
cybertrust-global-root.chain-demos.digicert.com
trusted-root-g4-revoked.chain-demos.digicert.com
rancher.blu.digicert.com
one.digicert.com
images.shoppingguarantee.digicert.com
ECA1WIDB01.DCAPROD.DIGICERT.COM
resources.digicert.com
statuspage.io
images.updates.digicert.com
cds3.cvent.com
status-wrapper.digicert.com
statuspage.io
U1WIADSMDC01.dc.digicert.com
statuspage.io
statuspage.io
assured-id-root-g3-expired.chain-demos.digicert.com
LE1WIADSMDC02.corp.digicert.com
smetrics.digicert.com
statuspage.io
intra.digicert.com
assured-id-root-ca.chain-demos.digicert.com
veeam-azure.dc.digicert.com
ev-root.chain-demos.digicert.com
statuspage.io
statuspage.io
Certificate
The complete raw certificate details for aem-cloud.corp.prod.blu.digicert.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgIQBPl4i8NtMJsrOtEZuoptODANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE5MDgxMzAwMDAwMFoXDTIxMDgxNzEy MDAwMFowgeMxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRUwEwYLKwYBBAGCNzwCAQITBFV0YWgxFTATBgNVBAUTDDUy OTk1MzctMDE0MjELMAkGA1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxDTALBgNVBAcT BExlaGkxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMQwwCgYDVQQLEwNCT00xLTAr BgNVBAMTJGFlbS1jbG91ZC5jb3JwLnByb2QuYmx1LmRpZ2ljZXJ0LmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxr7BKumi+YltFuwBuhLJuFpFot yws/+YcAFUjVwjPXlZ+q0xe3RrcnCfTfujeKJ+eBoNp4bPUJoxM3cwmRzwnqUEOZ 502PN9fc5hZIy1dLMwS3NibmmCBw293HHD6s/uTn+Q6QtO+5TYNbMtFAZfnCXkho stmXcz2YVgzOu6awCxlbyZkLVfWRW31rM4guTqL/WjGfLKXSR17v8a3iiUq2ZZFR WR9I1H9pipio1pggBkWQ7tp04HFChyqCocEoZIe66MPgZR0Vi0UsSmJRxbPquCvC 1/l5v6LvOy2GZCGsvQKzEAbBrSmdPLwYNFyf0tc9krDCZk3Sn6a+VwjYdLsCAwEA AaOCAkAwggI8MB8GA1UdIwQYMBaAFD3TUKXWoK3u80pgCmXTIdT4+NYPMB0GA1Ud DgQWBBQVcVOAUaVCkz+UqQ1F52EdkfuB9jBZBgNVHREEUjBQgiRhZW0tY2xvdWQu Y29ycC5wcm9kLmJsdS5kaWdpY2VydC5jb22CKHd3dy5hZW0tY2xvdWQuY29ycC5w cm9kLmJsdS5kaWdpY2VydC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3Js My5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzIuY3JsMDSgMqAwhi5odHRw Oi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzIuY3JsMEsGA1Ud IAREMEIwNwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEwgYgGCCsGAQUFBwEBBHwwejAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFIGCCsGAQUFBzAChkZodHRw Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyRXh0ZW5kZWRWYWxp ZGF0aW9uU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB /wQCBQAwDQYJKoZIhvcNAQELBQADggEBALSfPOv5Q+7z+4eKKYgQ7jmMiKPNHoYf li/oDFt/DYOGcsUQ+SqzWJO/cnXuGljZ2+Q1l+hW+HfgxIbzGIN+LhrLb3MZ1wmp D1XZDpbCk7/6wWpKlLL7cl16eIpxxEX7viAiX9NTqHA4sZEivxcnQUqM7Nlxl+YL YP4qMAnAEOm5N5y7nKwwqAvPza6HByEo5FTaG3OiVgBbBUIUuVQVzU57PtgmeiEu Ghwc38fi2gCm40En64t41rgdbC9sdCXdoZ/FVF+y0oFWdBofbdfZF5C6j1ZukNzE gvmfhralLVnMcU2kDTm8lLPem7wEoSRvt8k+0r28AkYaYpOR+/y4zLg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGvsEq6aL5iW0W7AG6Es m4WkWi3LCz/5hwAVSNXCM9eVn6rTF7dGtycJ9N+6N4on54Gg2nhs9QmjEzdzCZHP CepQQ5nnTY8319zmFkjLV0szBLc2JuaYIHDb3cccPqz+5Of5DpC077lNg1sy0UBl +cJeSGiy2ZdzPZhWDM67prALGVvJmQtV9ZFbfWsziC5Oov9aMZ8spdJHXu/xreKJ SrZlkVFZH0jUf2mKmKjWmCAGRZDu2nTgcUKHKoKhwShkh7row+BlHRWLRSxKYlHF s+q4K8LX+Xm/ou87LYZkIay9ArMQBsGtKZ08vBg0XJ/S1z2SsMJmTdKfpr5XCNh0 uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6612238863263442619764945149900778808 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5299537-0142' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lehi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aem-cloud.corp.prod.blu.digicert.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19746393975310303132357244706271634928677778264645334901076969494768404380973986680747315373929889590289932333734090421438144278759585236197726773563695423605752588273706200892344940011622786784963495851112050834206731566822123185583493820402144578448748028411741099418426430810161381666077940672721324671006510646951899139168608641519508747140917098289620529074082027161169880019697937416315520898144400684708336151079319590798937043791420504512843079745140732206213811152498607516709573533088935826814389772989688563804414551907851598430057302170052690088727057794263916883458406743407939686327932623663388255876283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1571538051a542933f94a90d45e7611d91fb81f6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem-cloud.corp.prod.blu.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aem-cloud.corp.prod.blu.digicert.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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