watchtower.sand.braintreepayments.com
- PayPal, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:cb:a7:a2:04:76:e4:b2:fb:e0:6e:ea:6a:f2:9e:13 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
PayPal, Inc.
Organization:
PayPal, Inc.
Organization unit: Braintree Production
Organization unit: Braintree Production
State / Province:
California
Locality: San Jose
Country: US
Locality: San Jose
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:cb:a7:a2:04:76:e4:b2:fb:e0:6e:ea:6a:f2:9e:13Serial Number (int): 2386664256815296308507061528518893075
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 16:50:74:b1:db:d1:a6:fc:73:73:47:fe:25:f1:2c:aa:74:91:c5:df
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 2d:ef:3b:2e:40:0e:7f:57:5c:c1:4c:22:c4:0e:16:dc:02:1b:af:c1
Fingerprint (sha256): 01:37:b6:49:48:fa:79:3c:5d:b1:46:3e:5c:9a:04:cd:4f:27:0d:4d:70:1a:d7:a7:6d:15:fc:d4:e6:34:a5:f4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate watchtower.sand.braintreepayments.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for watchtower.sand.braintreepayments.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
watchtower.sand.braintreepayments.com
Other certificates including the domain name braintreepayments.com
(limited to 100 certificates)
statuspage.io
rundeck.qwt.braintreepayments.com
status.acquia.com
statuspage.io
statuspage.io
statuspage.io
js-sdk-integration.sand.braintreepayments.com
apply.qa.braintreepayments.com
blue-front-door-us-east-1-proxy.staging.braintreepayments.com
resources.braintreepayments.com
watchtower.sand.braintreepayments.com
gstatic.dev.braintreepayments.com
statuspage.io
resources.braintreepayments.com
panel.sandbox.braintreegateway.com
graphql.braintreepayments.com
login.staging.braintreepayments.com
statuspage.io
opscenter.qa.braintreepayments.com
statuspage.io
dimension-finder-stag.sandbox.braintree-api.com
www.braintreepayments.com
collins.qwt.braintreepayments.com
billing.braintreepayments.com
statuspage.io
*.produswest2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
disputin.sandbox.braintree.tools
statuspage.io
billing.qa2.braintreepayments.com
cosmos-authy.braintreepayments.com
braintreepayments.com
statuspage.io
adxstatus.com
statuspage.io
status.acquia.com
demo.braintreepayments.com
solidfire.chi.braintreepayments.com
statuspage.io
statuspage.io
www.paypal-status.com
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
provisioner.qa.braintreepayments.com
billing.qa2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
provisioner.sand.braintreepayments.com
payments.braintree-api.com
statuspage.io
statuspage.io
puppet.braintreepayments.com
decisions.qa.braintreepayments.com
statuspage.io
statuspage.io
gateway.staging.braintreepayments.com
cosmos-authy.braintreepayments.com
brand.braintreepayments.com
statuspage.io
statuspage.io
login.qa.braintreepayments.com
statuspage.io
apply.qa.braintreepayments.com
logs-sand.braintreepayments.com
statuspage.io
billing-registration.braintreepayments.com
panel.gateway.qa.braintreepayments.com
statuspage.io
watchtower.qwt.braintreepayments.com
statuspage.io
statuspage.io
collins.chi.braintreepayments.com
statuspage.io
login.qa.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
jabber.braintreepayments.com
mission-control.braintree-api.com
*.qa.braintreepayments.com
collins.chi.braintreepayments.com
graphql.staging.braintreepayments.com
statuspage.io
*.dev.cosmos.braintreepayments.com
rundeck.qwt.braintreepayments.com
status.acquia.com
statuspage.io
statuspage.io
statuspage.io
js-sdk-integration.sand.braintreepayments.com
apply.qa.braintreepayments.com
blue-front-door-us-east-1-proxy.staging.braintreepayments.com
resources.braintreepayments.com
watchtower.sand.braintreepayments.com
gstatic.dev.braintreepayments.com
statuspage.io
resources.braintreepayments.com
panel.sandbox.braintreegateway.com
graphql.braintreepayments.com
login.staging.braintreepayments.com
statuspage.io
opscenter.qa.braintreepayments.com
statuspage.io
dimension-finder-stag.sandbox.braintree-api.com
www.braintreepayments.com
collins.qwt.braintreepayments.com
billing.braintreepayments.com
statuspage.io
*.produswest2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
disputin.sandbox.braintree.tools
statuspage.io
billing.qa2.braintreepayments.com
cosmos-authy.braintreepayments.com
braintreepayments.com
statuspage.io
adxstatus.com
statuspage.io
status.acquia.com
demo.braintreepayments.com
solidfire.chi.braintreepayments.com
statuspage.io
statuspage.io
www.paypal-status.com
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
provisioner.qa.braintreepayments.com
billing.qa2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
provisioner.sand.braintreepayments.com
payments.braintree-api.com
statuspage.io
statuspage.io
puppet.braintreepayments.com
decisions.qa.braintreepayments.com
statuspage.io
statuspage.io
gateway.staging.braintreepayments.com
cosmos-authy.braintreepayments.com
brand.braintreepayments.com
statuspage.io
statuspage.io
login.qa.braintreepayments.com
statuspage.io
apply.qa.braintreepayments.com
logs-sand.braintreepayments.com
statuspage.io
billing-registration.braintreepayments.com
panel.gateway.qa.braintreepayments.com
statuspage.io
watchtower.qwt.braintreepayments.com
statuspage.io
statuspage.io
collins.chi.braintreepayments.com
statuspage.io
login.qa.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
jabber.braintreepayments.com
mission-control.braintree-api.com
*.qa.braintreepayments.com
collins.chi.braintreepayments.com
graphql.staging.braintreepayments.com
statuspage.io
*.dev.cosmos.braintreepayments.com
Certificate
The complete raw certificate details for watchtower.sand.braintreepayments.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIQAcunogR25LL74G7qavKeEzANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMDA2MjMwMDAwMDBaFw0yMjA2MjgxMjAwMDBa MIGbMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTERMA8GA1UEBxMI U2FuIEpvc2UxFTATBgNVBAoTDFBheVBhbCwgSW5jLjEdMBsGA1UECxMUQnJhaW50 cmVlIFByb2R1Y3Rpb24xLjAsBgNVBAMTJXdhdGNodG93ZXIuc2FuZC5icmFpbnRy ZWVwYXltZW50cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY /lowKBRCrXtrDstNu6X6IRVHgN5HfXEm0p59fLyiXPVZgb4Xi90qhScwfU4kp2ff DqRxROBF31NSy+RFnE9KcXZfUPwozQjwQ5bNGULw93bUNWavERczPvjw7JIGqiJv ywUcLuozH7r/LqvO8eBn3ZOIuJrSBn5qZ0lNDExlsWwiW4XjmO/83hGo+L0+0NGn DS2Lwx6x3dKYgmjPcL4yvU0qeDsy163eaK1uibY5oCLShdRcTtgEbBDuhxmMoVXl k44wWtGZtDqx//Cl2ohlWoxNlu009nrep0R+9cskeWOnNtAq2T52C7F0hz6T+3MS GCCOqlmqZJPMmzAQqMSxAgMBAAGjggITMIICDzAfBgNVHSMEGDAWgBRRaP+QrwIH dTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUFlB0sdvRpvxzc0f+JfEsqnSRxd8wMAYD VR0RBCkwJ4Ild2F0Y2h0b3dlci5zYW5kLmJyYWludHJlZXBheW1lbnRzLmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUG A1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhh LXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9z aGEyLWhhLXNlcnZlci1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB AgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln aWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j b20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMB Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBG 5PlQrgTY0XF/HGoO73sgbUx7lGjqbBZGkKpBupcXxAgiignmsnhZoS+3fVl3JWSi 5ciK7Tkdj7nj1Oas9p0h+Qs2OQ+IHUMPkmRiTVzv5a7w1Y2vngi+eofXaPEQaQ5S eVt0OomsgILU7p8x/p5NWHlgtlXzOOQYTOb3WffHeIXK02uhn+lN4bFFX3xb4Xzk MGu38lcN9akiwLewUS6ctGhDjCuSa8EeAm4dHKzmSJJkrGMETV1rVc7JK2kVXh6H tvZxvPR8xNFR9bQ31mw//rxqeGF7UiQXjIeB4CZuFlQgLMXVOtC1BXbCeq0+qNTZ /ZVSPV7X1c7GIemjRcQm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P5aMCgUQq17aw7LTbul +iEVR4DeR31xJtKefXy8olz1WYG+F4vdKoUnMH1OJKdn3w6kcUTgRd9TUsvkRZxP SnF2X1D8KM0I8EOWzRlC8Pd21DVmrxEXMz748OySBqoib8sFHC7qMx+6/y6rzvHg Z92TiLia0gZ+amdJTQxMZbFsIluF45jv/N4RqPi9PtDRpw0ti8Mesd3SmIJoz3C+ Mr1NKng7Mtet3mitbom2OaAi0oXUXE7YBGwQ7ocZjKFV5ZOOMFrRmbQ6sf/wpdqI ZVqMTZbtNPZ63qdEfvXLJHljpzbQKtk+dguxdIc+k/tzEhggjqpZqmSTzJswEKjE sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2386664256815296308507061528518893075 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayPal, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Braintree Production' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watchtower.sand.braintreepayments.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27392899665155910892276291209128328017157223727224830810082753171468320897341714549466358451552399375944995032936682655275520589919988128961294015187944919631992760149893780778846089730088889902943649997471749123828433427794215656084478977626962891472286408093110712075762527603307123241192639253315966239570773715718335670293007227313203486843575251387872001997185016652592444899669065232676984358944134942309160795089139611363907159077474481623478929068950489018434562941587966943133222207323412428115305317070440520370749431096663307345624517339650767518148005980091443349216109986451445518016910191833440066258097 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 165074b1dbd1a6fc737347fe25f12caa7491c5df . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchtower.sand.braintreepayments.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0046e4f950ae04d8d1717f1c6a0eef7b206d4c7b9468ea6c164690aa41ba9717c408228a09e6b27859a12fb77d59772564a2e5c88aed391d8fb9e3d4e6acf69d21f90b36390f881d430f9264624d5cefe5aef0d58daf9e08be7a87d768f110690e52795b743a89ac8082d4ee9f31fe9e4d587960b655f338e4184ce6f759f7c77885cad36ba19fe94de1b1455f7c5be17ce4306bb7f2570df5a922c0b7b0512e9cb468438c2b926bc11e026e1d1cace6489264ac63044d5d6b55cec92b69155e1e87b6f671bcf47cc4d151f5b437d66c3ffebc6a78617b5224178c8781e0266e1654202cc5d53ad0b50576c27aad3ea8d4d9fd95523d5ed7d5cec621e9a345c426