*.avast.com
- Avast plc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 07:f3:d9:da:ab:e1:33:e6:19:11:61:32:af:53:4a:36 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Avast plc
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:f3:d9:da:ab:e1:33:e6:19:11:61:32:af:53:4a:36Serial Number (int): 10570742714935984820278545393292364342
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 7e:07:88:2d:4d:22:10:7c:bb:01:98:91:1f:7e:6a:b2:7c:51:a4:03
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): f8:1d:29:24:17:a0:bc:35:12:07:a5:bb:51:d9:8b:bd:66:c2:53:3c
Fingerprint (sha256): 01:cb:a7:40:51:87:81:5b:92:ca:7e:8d:2e:ca:5f:16:f5:68:fa:51:39:c5:3c:0e:60:f1:27:fb:7e:bb:25:0f
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.avast.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.avast.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.avast.com
avast.com
connect-stage.avast.com
avast.com
connect-stage.avast.com
Other certificates including the domain name avast.com
(limited to 100 certificates)
*.avast.com
business-auth.dev-europe-west3.smbrm.avast.com
*.ff.avast.com
*.avast.com
*.avast.com
*.avast.com
foundation.avast.com
www3.avast.com
support.business.avast.com
campaign.avast.com
*.backup.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
partners.avast.com
business-vpn-device.dev-europe-west3.smbrm.avast.com
*.avast.com
shop.avast.com
www.avast.com
*.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
foundation.avast.com
*.avast.com
*.ff.avast.com
*.avast.com
buy-qa4.norton.com
dls.norton.com
*.avast.com
blog.avast.com
*.avast.com
*.avast.com
*.avast.com
nsone-proxy.ff.avast.com
vpscache.avast.com
maps.avast.com
*.avast.com
partners-int.norton.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
maps.avast.com
*.avast.com
ipm.store.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com
*.avast.com
shepherd.ff.avast.com
*.avast.com
www3.avast.com
ks.norton.com
*.avast.com
*.avast.com
web.backup.norton.com
*.avast.com
*.avast.com
*.avast.com
business-patch-device.prod-europe-west3.smbrm.avast.com
business-dm-device.prod-us-west1.smbrm.avast.com
subscriptions-test.avast.com
*.avast.com
*.avast.com
*.avast.com
update.bullguard.com
*.ff.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
*.avast.com
viruslab.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
xls-int.norton.com
*.ff.avast.com
*.eu.main.dev.iden.avast.com
store.avast.com
software-cleanup.ff.avast.com
*.avast.com
*.avast.com
easycare.ch.fcm.travel
stage.www.avast.ua.cms.int.avast.com
*.avast.com
*.avast.com
*.avast.com
shop.avast.com
*.avast.com
*.ff.avast.com
alpha-license-dealer-test.ff.avast.com
*.avast.com
vcp-portal.ff.avast.com
www.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com
business-auth.dev-europe-west3.smbrm.avast.com
*.ff.avast.com
*.avast.com
*.avast.com
*.avast.com
foundation.avast.com
www3.avast.com
support.business.avast.com
campaign.avast.com
*.backup.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
partners.avast.com
business-vpn-device.dev-europe-west3.smbrm.avast.com
*.avast.com
shop.avast.com
www.avast.com
*.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
foundation.avast.com
*.avast.com
*.ff.avast.com
*.avast.com
buy-qa4.norton.com
dls.norton.com
*.avast.com
blog.avast.com
*.avast.com
*.avast.com
*.avast.com
nsone-proxy.ff.avast.com
vpscache.avast.com
maps.avast.com
*.avast.com
partners-int.norton.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
maps.avast.com
*.avast.com
ipm.store.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com
*.avast.com
shepherd.ff.avast.com
*.avast.com
www3.avast.com
ks.norton.com
*.avast.com
*.avast.com
web.backup.norton.com
*.avast.com
*.avast.com
*.avast.com
business-patch-device.prod-europe-west3.smbrm.avast.com
business-dm-device.prod-us-west1.smbrm.avast.com
subscriptions-test.avast.com
*.avast.com
*.avast.com
*.avast.com
update.bullguard.com
*.ff.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
*.avast.com
viruslab.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
xls-int.norton.com
*.ff.avast.com
*.eu.main.dev.iden.avast.com
store.avast.com
software-cleanup.ff.avast.com
*.avast.com
*.avast.com
easycare.ch.fcm.travel
stage.www.avast.ua.cms.int.avast.com
*.avast.com
*.avast.com
*.avast.com
shop.avast.com
*.avast.com
*.ff.avast.com
alpha-license-dealer-test.ff.avast.com
*.avast.com
vcp-portal.ff.avast.com
www.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com
Certificate
The complete raw certificate details for *.avast.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIQB/PZ2qvhM+YZEWEyr1NKNjANBgkqhkiG9w0BAQ0FADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xOTExMTEwMDAwMDBaFw0yMTEyMjIxMjAwMDBa MGkxCzAJBgNVBAYTAkdCMQ8wDQYDVQQHEwZMb25kb24xEjAQBgNVBAoTCUF2YXN0 IHBsYzEfMB0GA1UECwwWY2VydGlmaWNhdGVzQGF2YXN0LmNvbTEUMBIGA1UEAwwL Ki5hdmFzdC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCymMkt p7E3TSIhLoOkfXjYqof2Nvw50IOvecb2HoQQIekFa3Z4JsY7b40n75242e7U7BSY 4wnLBR/pk0EKwlg93jHOMAKxushB0MkvwSz7Fwt8e+CMhIIIs93j4fk44aLhRGM3 XIa9PVjrHJ2qknWycqV6XBmh4tbFNS7v/7PTEVj4ft9NTcnnxgxTiDAI0T/EyB59 GvZPCsIdpYEcO5cI5OT1/wmZEjxDy93unlr+DnnsmZXRvWpFkAiEUqdjsWLle6UJ OX0MfbhXye86g9ioaH9QRZrlIvZwW164Zrl+Ur/bP3zlVW0bnJVMZokGsO+EuGRK HEcscHJuDMuqiHRe7KEYjXA3tscxGMGOOIQHd9aroG/UoiGZ0V+FoENTRB5t/AYa 4oe5yxl/vPGhhhHmkpM3cVGSX2Ypt2CW9upuekN6EA5BkoTqrhCH2tzm/9LSvSDL NLa51CVVjjfOAuusbzzkOdzyjwbpU+M6k3BN3onyrBZjuGd59b8tGBH0CMidPh84 4pRwXEoF7IAmVTsRs40V1FKf0n9pdslAVfO9ntJVJ6HLMSUQXXrx+yXj+jm7S0QB XSJ1+04yuidhF8jt1VN0glxKhwfbFObFM62HBYKZOci32q1CzrHWqBNPOL3Y/qcN 69wZj/04ph3lgLtcDHtdebrMmC/DZ2EUo0yI/QIDAQABo4ICHTCCAhkwHwYDVR0j BBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFH4HiC1NIhB8uwGY kR9+arJ8UaQDMDoGA1UdEQQzMDGCCyouYXZhc3QuY29tgglhdmFzdC5jb22CF2Nv bm5lY3Qtc3RhZ2UuYXZhc3QuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2Ny bDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0 cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNV HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0 dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJh bmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQENBQADggEBACBxN2RDDQ4HkdrA9fPzJqQZIRTB2maen+II JgOUJB/RbDvlXz22msm8XxAKONOZ6g6mfNMUSg0VAYKL3No2VaW5G+JHb4mi8lF2 RdP1TggNbrB74BsnVgee/pDj1JrTkYB+ntWURv6sVt/x7PZcozHDq/u7HQTdd8d4 bEFPFP3qboLmt4mJvrxZP/nFsemle64H2zeogeAMqa86WFY6Ln8jKzi9XIdYTEWR NqUcXK8uUpOYOBnHpm9oHl2w9TdvaUOQu5lArRijyHzN7QyugAnSgF4FrbwAREFA lqzBhEreylBa85R8wCl4CZSJfMIWo81VVdd+eOvI3jf2o4Ljquc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAspjJLaexN00iIS6DpH14 2KqH9jb8OdCDr3nG9h6EECHpBWt2eCbGO2+NJ++duNnu1OwUmOMJywUf6ZNBCsJY Pd4xzjACsbrIQdDJL8Es+xcLfHvgjISCCLPd4+H5OOGi4URjN1yGvT1Y6xydqpJ1 snKlelwZoeLWxTUu7/+z0xFY+H7fTU3J58YMU4gwCNE/xMgefRr2TwrCHaWBHDuX COTk9f8JmRI8Q8vd7p5a/g557JmV0b1qRZAIhFKnY7Fi5XulCTl9DH24V8nvOoPY qGh/UEWa5SL2cFteuGa5flK/2z985VVtG5yVTGaJBrDvhLhkShxHLHBybgzLqoh0 XuyhGI1wN7bHMRjBjjiEB3fWq6Bv1KIhmdFfhaBDU0QebfwGGuKHucsZf7zxoYYR 5pKTN3FRkl9mKbdglvbqbnpDehAOQZKE6q4Qh9rc5v/S0r0gyzS2udQlVY43zgLr rG885Dnc8o8G6VPjOpNwTd6J8qwWY7hnefW/LRgR9AjInT4fOOKUcFxKBeyAJlU7 EbONFdRSn9J/aXbJQFXzvZ7SVSehyzElEF168fsl4/o5u0tEAV0idftOMronYRfI 7dVTdIJcSocH2xTmxTOthwWCmTnIt9qtQs6x1qgTTzi92P6nDevcGY/9OKYd5YC7 XAx7XXm6zJgvw2dhFKNMiP0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10570742714935984820278545393292364342 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avast plc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '[email protected]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.avast.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728611456210797925881596039985379726418861957624321310964707503173977727933539480291871239347556961180716774877094474384806362370646704053302756318486220945493693090504782159899595273268258132311441392678286408137823156091786014388660440170883458978982883936363661554984708717455366473447659440770156885758561773705613191630352389652255328061040896642818286776711272935958193231732311967017234736950569585139133479888517419452599075847945584451665399430779286216000014056632737102754592218602064022746142924331416620280563099311307643945731378654081416071037293188500518753005185801910451353833725057819045537181592277304712274393583020741883964901560208635686286881035833531037688614235831589929342317874303068584626996252852802264466974395576874330863298444147370806929955082212553164776101535959827187008711418810960724631471524489254002285946190001991759486926944326461984182444404195049357180482549477160549760638575654183612362420233305025076889311662825017747524834600810068073917813098306783659803644129800350884726044438423462993278478700165782329763961314160921201128189255134218725639704541330691615202451990652418079617569622420188286509022816846341613731953123412451568894509097814115592028736947117200448080909393758461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7e07882d4d22107cbb0198911f7e6ab27c51a403 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-stage.avast.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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