dealertrack.com
- DEALERTRACK, INC -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0e:0c:90:9b:cc:18:6f:7a:00:f0:dd:52:9a:5c:a7:e6 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DEALERTRACK, INC
Organization:
DEALERTRACK, INC
Organization unit: Dealertrack DMS
Organization unit: Dealertrack DMS
State / Province:
New York
Locality: New Hyde Park
Country: US
Locality: New Hyde Park
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:0c:90:9b:cc:18:6f:7a:00:f0:dd:52:9a:5c:a7:e6Serial Number (int): 18674432513803838360184358187862632422
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9a:8a:8d:c7:1c:2d:e6:e2:13:65:16:cb:47:5c:59:90:a4:94:a3:b7
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 41:ee:7c:5d:89:74:00:e3:cb:94:4f:fa:74:cd:0e:1d:cc:d1:c5:74
Fingerprint (sha256): 01:6e:d3:a4:fd:d4:92:ee:ba:5f:38:dc:93:d4:97:13:20:c2:7a:c9:1c:71:db:39:b6:65:13:88:0f:c4:eb:52
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate dealertrack.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dealertrack.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dealertrack.com
www.dealertrack.com
www.dealertrack.com
Other certificates including the domain name dealertrack.com
(limited to 100 certificates)
akamai-san38.exacttarget.com
qa.digitalservices.dealertrack.com
appsvc.qa.dealertrack.com
dmshealth.dealertrack.com
dms03a.dms.dealertrack.com
*.uat1.dealertrack.com
clr-bridge.dealertrack.com
dmshealth.dealertrack.com
encrypt.dealertrack.com
*.dtdrs.dealertrack.com
dealertrack.com
*.pa1.dealertrack.com
ibmwebspheremqgctwndc5.dds.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
*.dealertrack.com
integration.dealertrack.com
complianceguide.dealertrack.com
www.dealertrack.com
dt-client-auth.dealertrack.com
partners.qa.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
inventoryplus.dealertrack.com
services.qa.dealertrack.com
sso-saml-np.dealertrack.com
amr.dealertrack.com
cwpstorage.status.symantec.com
*.qat1.dealertrack.com
sign.uat1.dealertrack.com
beta.qa.dealertrack.com
nyvpn.dealertrack.com
*.dtdrs.dealertrack.com
dds.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
encrypt.uat1.dealertrack.com
dds.dealertrack.com
us-dr.dealertrack.com
*.dtdrs.dealertrack.com
appsvc.dealertrack.com
ibmwebspheremqgcpwndc4.dds.dealertrack.com
sign.dealertrack.com
ddstsg.dealertrack.com
dmshealth.dealertrack.com
cwpstorage.status.symantec.com
www.dealertrack.com
*.dvt1.aws.dealertrack.com
amosstatus.ifsleasing.com
*.uat.unifipp.dealertrack.com
blog.dealertrack.com
complianceguide.dealertrack.com
mobile.dealertrack.com
my.qa.dealertrack.com
dmshealth.dealertrack.com
customervoice.acumatica.com
clr-bridge.dealertrack.com
fni-static-np.dealertrack.com
*.dr.dealertrack.com
cwpstorage.status.symantec.com
amosstatus.ifsleasing.com
dms06.dms.dealertrack.com
ebusiness.cdn1.dealertrack.com
dealertrack.com
*.qa1.dealertrack.com
*.api.dealertrack.com
piforceqa.dealertrack.com
*.ua2.dealertrack.com
*.uat2.dealertrack.com
amosstatus.ifsleasing.com
*.uat1.dealertrack.com
amosstatus.ifsleasing.com
dmshealth.dealertrack.com
*.dtdrs.dealertrack.com
complianceguide.dealertrack.com
dtlpi.uat1.dealertrack.com
mobile.dealertrack.com
*.uat1.dealertrack.com
gmaccessories.dealertrack.com
*.dtdrs.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
login.dealertrack.com
dms360.dealertrack.com
*.dms.dealertrack.com
amosstatus.ifsleasing.com
www.uat1.dealertrack.com
ww2.qa1.dealertrack.com
san3166.cdntwrk.com
webservices.qa.dealertrack.com
*.my.dealertrack.com
drs.dealertrack.com
customervoice.acumatica.com
dmshealth.dealertrack.com
encrypt-np.dealertrack.com
2016complianceguide.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
dmshealth.dealertrack.com
qa.digitalservices.dealertrack.com
appsvc.qa.dealertrack.com
dmshealth.dealertrack.com
dms03a.dms.dealertrack.com
*.uat1.dealertrack.com
clr-bridge.dealertrack.com
dmshealth.dealertrack.com
encrypt.dealertrack.com
*.dtdrs.dealertrack.com
dealertrack.com
*.pa1.dealertrack.com
ibmwebspheremqgctwndc5.dds.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
*.dealertrack.com
integration.dealertrack.com
complianceguide.dealertrack.com
www.dealertrack.com
dt-client-auth.dealertrack.com
partners.qa.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
inventoryplus.dealertrack.com
services.qa.dealertrack.com
sso-saml-np.dealertrack.com
amr.dealertrack.com
cwpstorage.status.symantec.com
*.qat1.dealertrack.com
sign.uat1.dealertrack.com
beta.qa.dealertrack.com
nyvpn.dealertrack.com
*.dtdrs.dealertrack.com
dds.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
encrypt.uat1.dealertrack.com
dds.dealertrack.com
us-dr.dealertrack.com
*.dtdrs.dealertrack.com
appsvc.dealertrack.com
ibmwebspheremqgcpwndc4.dds.dealertrack.com
sign.dealertrack.com
ddstsg.dealertrack.com
dmshealth.dealertrack.com
cwpstorage.status.symantec.com
www.dealertrack.com
*.dvt1.aws.dealertrack.com
amosstatus.ifsleasing.com
*.uat.unifipp.dealertrack.com
blog.dealertrack.com
complianceguide.dealertrack.com
mobile.dealertrack.com
my.qa.dealertrack.com
dmshealth.dealertrack.com
customervoice.acumatica.com
clr-bridge.dealertrack.com
fni-static-np.dealertrack.com
*.dr.dealertrack.com
cwpstorage.status.symantec.com
amosstatus.ifsleasing.com
dms06.dms.dealertrack.com
ebusiness.cdn1.dealertrack.com
dealertrack.com
*.qa1.dealertrack.com
*.api.dealertrack.com
piforceqa.dealertrack.com
*.ua2.dealertrack.com
*.uat2.dealertrack.com
amosstatus.ifsleasing.com
*.uat1.dealertrack.com
amosstatus.ifsleasing.com
dmshealth.dealertrack.com
*.dtdrs.dealertrack.com
complianceguide.dealertrack.com
dtlpi.uat1.dealertrack.com
mobile.dealertrack.com
*.uat1.dealertrack.com
gmaccessories.dealertrack.com
*.dtdrs.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
login.dealertrack.com
dms360.dealertrack.com
*.dms.dealertrack.com
amosstatus.ifsleasing.com
www.uat1.dealertrack.com
ww2.qa1.dealertrack.com
san3166.cdntwrk.com
webservices.qa.dealertrack.com
*.my.dealertrack.com
drs.dealertrack.com
customervoice.acumatica.com
dmshealth.dealertrack.com
encrypt-np.dealertrack.com
2016complianceguide.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
dmshealth.dealertrack.com
Certificate
The complete raw certificate details for dealertrack.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIQDgyQm8wYb3oA8N1Smlyn5jANBgkqhkiG9w0BAQ0FADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODAyMDcwMDAwMDBaFw0yMTAyMTExMjAwMDBa MIGHMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxFjAUBgNVBAcTDU5l dyBIeWRlIFBhcmsxGTAXBgNVBAoTEERFQUxFUlRSQUNLLCBJTkMxGDAWBgNVBAsT D0RlYWxlcnRyYWNrIERNUzEYMBYGA1UEAxMPZGVhbGVydHJhY2suY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3maZMcY5U7FYlfvb7XJc1TInbWa 6aYluQ1t9FqxjfZjbFv+5WywSEtNJy8GifwYjpPFDzGZpnb5pQDTV6iDFoFu0CK4 AzaL1Ivefq81TJu8cn4rG8UsdcBMAkGx9N0NO9YJyKBDJWpFfx7RqyabA+MAdrpl qYREkNLUgLdWlRAnPPx1GVD6/cXsiY/xWups606NGPOf/lT9NOahOXvttdpGykyL CVvV3IZpbED6Mk6E6esopc1L2EINkXGNB4zjfRr/PWD9hv+rB0iCTndVK38RKtLF 6Ykpj5a4phOw2X/xDLwjQy8lwStYvCTyT30siniTZlFKQ2MAp3jfPFhh7wIDAQAB o4ICEjCCAg4wHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0O BBYEFJqKjcccLebiE2UWy0dcWZCklKO3MC8GA1UdEQQoMCaCD2RlYWxlcnRyYWNr LmNvbYITd3d3LmRlYWxlcnRyYWNrLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCG Lmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmww TAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93 d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAC hkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFz c3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBDQUAA4IBAQAjlfyzTEA4bTtrF+zEGhoWENkxRNar ZF0hxy12TW+S7HAH3lqKVApxtCGpjpxzaXohCA1n85fMGaQTBJpYn3EZ62K7CIF+ Yxgd5McbNJtzIUxbEWaWQEBfIQnaM5yM8+HgU1Jj/wK1rGjK8DPi3rZ8TKEGT4+R CcQM4Vy49uuWoTc7l3odh8Yqtkl/a95qt0KSdx1+FNbMemLEEqKdZsRtsTvyG9pA xoYSxbLfDFyQBP7jy7AlgHXFLfRre/VRe4VT+Kf4IPj73FADyxGUf9reRnLZ/Fei GHmmK35FFg/31bV7wjIe0UVH8AV/SPQEjmOGTEWJt1OsGWvDHS8oKCen -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3maZMcY5U7FYlfvb7XJ c1TInbWa6aYluQ1t9FqxjfZjbFv+5WywSEtNJy8GifwYjpPFDzGZpnb5pQDTV6iD FoFu0CK4AzaL1Ivefq81TJu8cn4rG8UsdcBMAkGx9N0NO9YJyKBDJWpFfx7Rqyab A+MAdrplqYREkNLUgLdWlRAnPPx1GVD6/cXsiY/xWups606NGPOf/lT9NOahOXvt tdpGykyLCVvV3IZpbED6Mk6E6esopc1L2EINkXGNB4zjfRr/PWD9hv+rB0iCTndV K38RKtLF6Ykpj5a4phOw2X/xDLwjQy8lwStYvCTyT30siniTZlFKQ2MAp3jfPFhh 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18674432513803838360184358187862632422 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hyde Park' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DEALERTRACK, INC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dealertrack DMS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dealertrack.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21646714872843196911818283571516672214357771939671623468234015323612463855981647210986586146753082992675564577963438826854604041227139016081227323271992585536172779094018018389293116067937978694960313539952036173163994272327834466506203583897898826704928776790484456863008708503537709034812123960771211196115229906637030398449373077996491270122143265762418321633458948229678188746939849604997731492471194895903166003235292807352776749673858043219177812252304379344102363324319180280193765638979285021733545783423758038763539911515951737237912570193916271760579356201271208393669687107339799336403633096523225495003631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a8a8dc71c2de6e2136516cb475c5990a494a3b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealertrack.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealertrack.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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