LIVE.AF.CENTURYLINK.COM
- CenturyLink, Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0c:c4:bd:81:eb:8e:25:8c:1a:4e:0a:19:f2:60:f4:bc was issued on by DigiCert Inc.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CenturyLink, Inc.
Organization:
CenturyLink, Inc.
Organization unit: Service Delivery Framework
Organization unit: Service Delivery Framework
State / Province:
Louisiana
Locality: Monroe
Country: US
Locality: Monroe
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:c4:bd:81:eb:8e:25:8c:1a:4e:0a:19:f2:60:f4:bcSerial Number (int): 16972269802440693282248206190622340284
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dd:fc:57:63:18:ed:d4:d6:3e:20:7e:c3:4a:66:d6:1e:ab:84:1d:3d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 44:62:c9:ed:10:cd:78:af:f4:db:93:86:51:8b:a6:de:0e:87:88:7f
Fingerprint (sha256): 01:a2:df:19:4f:f9:c9:6d:47:a6:09:8a:3c:2a:3e:5b:d3:34:94:23:2e:2e:0a:fa:43:ab:c9:ff:46:be:b8:b4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate LIVE.AF.CENTURYLINK.COM
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for LIVE.AF.CENTURYLINK.COM
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
LIVE.AF.CENTURYLINK.COM
login.centurylink.com
login.af.centurylink.com
quickconnect-api.chi.af.centurylink.com
quickconnect.chi.af.centurylink.com
quickconnect-api.dnv.af.centurylink.com
quickconnect.dnv.af.centurylink.com
login-api.centurylink.com
login-api.chi.centurylink.com
login-api.dnv.centurylink.com
live1.af.centurylink.com
live2.af.centurylink.com
live5.af.centurylink.com
live6.af.centurylink.com
corp-xzeus.af.qwest.net
login.centurylink.com
login.af.centurylink.com
quickconnect-api.chi.af.centurylink.com
quickconnect.chi.af.centurylink.com
quickconnect-api.dnv.af.centurylink.com
quickconnect.dnv.af.centurylink.com
login-api.centurylink.com
login-api.chi.centurylink.com
login-api.dnv.centurylink.com
live1.af.centurylink.com
live2.af.centurylink.com
live5.af.centurylink.com
live6.af.centurylink.com
corp-xzeus.af.qwest.net
Other certificates including the domain name CENTURYLINK.COM
(limited to 100 certificates)
Certificate
The complete raw certificate details for LIVE.AF.CENTURYLINK.COM in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIDzCCBvegAwIBAgIQDMS9geuOJYwaTgoZ8mD0vDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMTIwMDAwMDAwWhcN MjAwNjE3MTIwMDAwWjCBlTELMAkGA1UEBhMCVVMxEjAQBgNVBAgTCUxvdWlzaWFu YTEPMA0GA1UEBxMGTW9ucm9lMRowGAYDVQQKExFDZW50dXJ5TGluaywgSW5jLjEj MCEGA1UECxMaU2VydmljZSBEZWxpdmVyeSBGcmFtZXdvcmsxIDAeBgNVBAMTF0xJ VkUuQUYuQ0VOVFVSWUxJTksuQ09NMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAx02gOvvOEJYIl0laSlob3WViuqzAo4kJr5FWzdzDhvftidFNM7bWBiQt TlIyM5AMWr4W8/gkQnLpeI/EpLYrkCO0E1tA3ZsmQg0x/NPNb1iFnUOvntArNnIk guxeOOwB5tP3fBzeeBYsURcwu77LsHixx1sTrpw5ALcn+qtzGLDf5Mf7Ycxu7gfY 7KRsA7TC/R8gCPIUcnYAIYF17ytkcNBr7l2uYCnJDwtlvmFsI7oLHTJFVOHSkdTY D2doAT1dw/SXlC8pxcyqwe4NNmgQPLYHPdLCSvm2TylQffHaYnwRJfjh1bhqNAMT s0K5ndNAgB3zns1tgo5omhUeW1LQh7wUG9k4WhVgiGllg53zQ42eROO09QAxQu79 IogPwYClNE8EsUEqUHZ7xLmK4Ub8PktaAV+m9NjhkhpvH00O6QIb0QKEfRP5P1VV IlE/UY3NyoDNt8HKpSvmNYc2uRQbUAt3oP6qfb/bIZ1sMSfxqmhbsVOdsWnFwvSe ZvUYXWCNe8wD6MBMdJ0IyLmxLEn3myUkPFHBzM/FIGL0rbJsShWlTdagO+vv0oZz QySFZGqPqRm8AV57b1fWQtrTQaYxtyLh1HIqm5oHDbO9XiTStRZBzaQjQGXHZMc7 dlZCy4FvX0IoVT02cMRErrhFV7AC1CieO8+dORFS3VFb4f3mOOsCAwEAAaOCA6Aw ggOcMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTd /FdjGO3U1j4gfsNKZtYeq4QdPTCCAc0GA1UdEQSCAcQwggHAghdMSVZFLkFGLkNF TlRVUllMSU5LLkNPTYIVbG9naW4uY2VudHVyeWxpbmsuY29tghhsb2dpbi5hZi5j ZW50dXJ5bGluay5jb22CJ3F1aWNrY29ubmVjdC1hcGkuY2hpLmFmLmNlbnR1cnls aW5rLmNvbYIjcXVpY2tjb25uZWN0LmNoaS5hZi5jZW50dXJ5bGluay5jb22CJ3F1 aWNrY29ubmVjdC1hcGkuZG52LmFmLmNlbnR1cnlsaW5rLmNvbYIjcXVpY2tjb25u ZWN0LmRudi5hZi5jZW50dXJ5bGluay5jb22CGWxvZ2luLWFwaS5jZW50dXJ5bGlu ay5jb22CHWxvZ2luLWFwaS5jaGkuY2VudHVyeWxpbmsuY29tgh1sb2dpbi1hcGku ZG52LmNlbnR1cnlsaW5rLmNvbYIYbGl2ZTEuYWYuY2VudHVyeWxpbmsuY29tghhs aXZlMi5hZi5jZW50dXJ5bGluay5jb22CGGxpdmU1LmFmLmNlbnR1cnlsaW5rLmNv bYIYbGl2ZTYuYWYuY2VudHVyeWxpbmsuY29tghdjb3JwLXh6ZXVzLmFmLnF3ZXN0 Lm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9z c2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v c3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsG AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8 BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA89U8GXZEusw1ftUwy o0/m/vIB23fufgSr45we+rZFT2Be7xJ+J5io+xuCXWLTo26Yh5+Isw7WWCjQiaIq S2kqm47DKHHBF7NRg5IvpONiTD27sXoSFDwLR1bSWi8JDMQdqx1lN9nnCXIvNoHm XnaHfq4ZnBK3O5jHjaTCQbX6hkVMDWp9JY+HJpJq27xPAzYBpC35caG78rnI5frc IcS5IdKLQLLRvu4SNRqj6OAkWc7scEdsJmgFwyp+4CkB+qj0X4D+bUlR6ZW5spso LYYPFYE+Q1S+Ate5IVHqDZpS0Szab5Cm4FJFQbaaez1CWxjHhMRpmvprn9mNSQov c/L9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx02gOvvOEJYIl0laSlob 3WViuqzAo4kJr5FWzdzDhvftidFNM7bWBiQtTlIyM5AMWr4W8/gkQnLpeI/EpLYr kCO0E1tA3ZsmQg0x/NPNb1iFnUOvntArNnIkguxeOOwB5tP3fBzeeBYsURcwu77L sHixx1sTrpw5ALcn+qtzGLDf5Mf7Ycxu7gfY7KRsA7TC/R8gCPIUcnYAIYF17ytk cNBr7l2uYCnJDwtlvmFsI7oLHTJFVOHSkdTYD2doAT1dw/SXlC8pxcyqwe4NNmgQ PLYHPdLCSvm2TylQffHaYnwRJfjh1bhqNAMTs0K5ndNAgB3zns1tgo5omhUeW1LQ h7wUG9k4WhVgiGllg53zQ42eROO09QAxQu79IogPwYClNE8EsUEqUHZ7xLmK4Ub8 PktaAV+m9NjhkhpvH00O6QIb0QKEfRP5P1VVIlE/UY3NyoDNt8HKpSvmNYc2uRQb UAt3oP6qfb/bIZ1sMSfxqmhbsVOdsWnFwvSeZvUYXWCNe8wD6MBMdJ0IyLmxLEn3 myUkPFHBzM/FIGL0rbJsShWlTdagO+vv0oZzQySFZGqPqRm8AV57b1fWQtrTQaYx tyLh1HIqm5oHDbO9XiTStRZBzaQjQGXHZMc7dlZCy4FvX0IoVT02cMRErrhFV7AC 1CieO8+dORFS3VFb4f3mOOsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16972269802440693282248206190622340284 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Monroe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CenturyLink, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Delivery Framework' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LIVE.AF.CENTURYLINK.COM' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813086224389658536077655149768337960064856146557851866250487318427476487312927093470309956352846728489433670532517987836873906525822688647534295828856505632906026227165470741036390155161563396710498965107740942100993004344402156067304484537234085977139489535766872285532938766742709934252180839928467586253075119867817371935546695395977140298799388537225718977138900904873592546410270311327988998198734782323388465652277831136520799528157121359547874478766956669476910703876136345948015966587425807595970370827245797230075209981206184099393675490467142171669002540644693110211768266653477470826186875021341992653750812449799189150781302558572983772391820505090420189001678820291254472621889824731660777012249114416159831616993044219141834719848328316673394005076987969068138598519969029835289056634565419871168316836327449267389138989243333073746635521001280811184603551136564344716710060720250658301359844177499458884513951641481425969893100850839322759825838531670894531718874251017942350313485856233212756524622395836369302365328318806578757366691845020001381738415684419434555991826559727371424023146557246956575980521765758373054991331110304635778163355572190752750653105155327929775533715952254809720718007468974133305776945387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddfc576318edd4d63e207ec34a66d61eab841d3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LIVE.AF.CENTURYLINK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.chi.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.chi.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.dnv.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.dnv.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.chi.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.dnv.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live1.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live2.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live5.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live6.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp-xzeus.af.qwest.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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