otcmapi.cvs.com
- CVS / Pharmacy -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 08:22:57:cd:98:21:ff:6a:10:ec:4f:a4:58:42:28:98 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CVS / Pharmacy
Organization:
CVS / Pharmacy
Organization unit: I/S Security
Organization unit: I/S Security
State / Province:
Rhode Island
Locality: Woonsocket
Country: US
Locality: Woonsocket
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:22:57:cd:98:21:ff:6a:10:ec:4f:a4:58:42:28:98Serial Number (int): 10812142917961166447035757392866453656
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c9:86:0b:f5:da:21:d1:43:02:4f:11:bf:23:04:1e:51:ef:27:47:60
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): f2:6c:ae:46:9e:a7:0b:14:af:8f:9f:a6:91:f0:3b:8b:c9:a5:1c:49
Fingerprint (sha256): 01:f4:f2:2f:76:b7:a8:52:8f:af:77:ed:a4:02:a3:98:17:53:25:88:f0:a2:d5:b7:06:c5:fb:9a:be:b7:43:dc
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate otcmapi.cvs.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for otcmapi.cvs.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
otcmapi.cvs.com
Other certificates including the domain name cvs.com
(limited to 100 certificates)
pt2.cvs.com
server2UAT-EV.cvs.com
orange-pos.devrxc.cvs.com
diamond-pccrxconnect.devrxc.cvs.com
surescritpscvs.ptextrxc.cvs.com
ESL_C_ZAPT224.cvs.com
ESL-E-ZAD3108.cvs.com
cvs1.cvs.com
amber-caremark.devrxc.cvs.com
cvsmail2.cvs.com
rri1mylppl1v.cvs.com
rose-caremark.devrxc.cvs.com
surescripts.ptextrxc.cvs.com
rri2rxwbda301.cvs.com
indigo-surescritpscvs-intake.devextrxc.cvs.com
rri2tridpl1.cvs.com
fuchsia-pcc-aux-rxcdevaz.cvs.com
orange-opentext.devextrxc.cvs.com
vaccineclinicscheduler.cvs.com
magenta-west-esl.devrxc.cvs.com
KioPat.cvs.com
otcmsn.cvs.com
rxc-gemfire.cvs.com
watermelon-picknpack.devrxc.cvs.com
pillrobot.cvs.com
rri2domsmqs2a1.cvs.com
rri1rxbtpa50.cvs.com
rri2arfmpl05p.cvs.com
ZAP63.cvs.com
rri1iceapl4v.corp.cvs.com
acert-twopoint.cvs.com
rri1rxtapa50.cvs.com
magenta-ums-esl.devrxc.cvs.com
bronze-pos.devrxc.cvs.com
rri1rxamca1.cvs.com
amber-aimgui.devrxc.cvs.com
bronze-callcenter.devrxc.cvs.com
indigo-pcc-ac-rxcdevri.cvs.com
extracareportal-uat.cvs.com
rri2wbldl1v.cvs.com
rri2wblpl1v.cvs.com
product-stg.cvs.com
eri2etlada1a.corp.cvs.com
cvslearnetuat.cvs.com
raz1rxfwpa52.cvs.com
rri1iceasl1v.corp.cvs.com
grey-callcenter.devrxc.cvs.com
indigo-picknpack.devrxc.cvs.com
san-41-s12.tlsprovisioning.exacttarget.com
ere-esl.ptrxc.cvs.com
ESL-P-ZAD2116.cvs.com
KioKno.cvs.com
otcmapi.cvs.com
caremark.com
collective.cvs.com
diamond-cvscom.devrxc.cvs.com
mypassword.cvshealth.com
RIN1TKODUL2V.corp.cvscaremark.com
www.cvs.com
hermes-dev.cvs.com
ESL_G_ZAP000.cvs.com
care1on1-pt.corp.cvs.com
rri2cimapl2v.cvs.com
PBM-Z-ZLP095.cvs.com
ESL_E_ZAP111.cvs.com
rri1rxampa50.cvs.com
rri1rxfapa50.cvs.com
valiant.cvs.com
rma1rxthtl8.cvs.com
FederationE.cvscaremark.com
picknpack.rxc.cvs.com
pharmacy.cvs.com
cvsservicemgr-uat.cvs.com
rri2domsapa1a.cvs.com
RRIWSDCF5SECCW11-1.CVS.COM
grey-surescriptsepcs-intake.devextrxc.cvs.com
dlptestEV002.cvs.com
icet-dev1.cvs.com
portaldoctool-dev.cvs.com
bronze-az-ums-esl.devrxc.cvs.com
rri1rxfapa51.cvs.com
KIOSKLAH2017DEC.CORP.CVSCAREMARK.COM
MyTableau-West.cvs.com
raz1rxfapa53.cvs.com
fuchsia-spm.devrxc.cvs.com
paz1fluarl2v.cvs.com
icet-dev1.cvs.com
test_15.4_enroll.cvs.com
diamond-callcenter.devrxc.cvs.com
crm-esl.ptrxc.cvs.com
rri2domsasa1.cvs.com
rose-ums-esl.devrxc.cvs.com
qaapih1.aetna.com
otcwsm.cvs.com
RXC-WEB-PT2-LB.cvs.com
fuchsia-ums-esl.devrxc.cvs.com
csistoreapp.cvs.com
jnlprxp.ptrxc.cvs.com
rri2iceadl1v.corp.cvs.com
crm.cvs.com
server2UAT-EV.cvs.com
orange-pos.devrxc.cvs.com
diamond-pccrxconnect.devrxc.cvs.com
surescritpscvs.ptextrxc.cvs.com
ESL_C_ZAPT224.cvs.com
ESL-E-ZAD3108.cvs.com
cvs1.cvs.com
amber-caremark.devrxc.cvs.com
cvsmail2.cvs.com
rri1mylppl1v.cvs.com
rose-caremark.devrxc.cvs.com
surescripts.ptextrxc.cvs.com
rri2rxwbda301.cvs.com
indigo-surescritpscvs-intake.devextrxc.cvs.com
rri2tridpl1.cvs.com
fuchsia-pcc-aux-rxcdevaz.cvs.com
orange-opentext.devextrxc.cvs.com
vaccineclinicscheduler.cvs.com
magenta-west-esl.devrxc.cvs.com
KioPat.cvs.com
otcmsn.cvs.com
rxc-gemfire.cvs.com
watermelon-picknpack.devrxc.cvs.com
pillrobot.cvs.com
rri2domsmqs2a1.cvs.com
rri1rxbtpa50.cvs.com
rri2arfmpl05p.cvs.com
ZAP63.cvs.com
rri1iceapl4v.corp.cvs.com
acert-twopoint.cvs.com
rri1rxtapa50.cvs.com
magenta-ums-esl.devrxc.cvs.com
bronze-pos.devrxc.cvs.com
rri1rxamca1.cvs.com
amber-aimgui.devrxc.cvs.com
bronze-callcenter.devrxc.cvs.com
indigo-pcc-ac-rxcdevri.cvs.com
extracareportal-uat.cvs.com
rri2wbldl1v.cvs.com
rri2wblpl1v.cvs.com
product-stg.cvs.com
eri2etlada1a.corp.cvs.com
cvslearnetuat.cvs.com
raz1rxfwpa52.cvs.com
rri1iceasl1v.corp.cvs.com
grey-callcenter.devrxc.cvs.com
indigo-picknpack.devrxc.cvs.com
san-41-s12.tlsprovisioning.exacttarget.com
ere-esl.ptrxc.cvs.com
ESL-P-ZAD2116.cvs.com
KioKno.cvs.com
otcmapi.cvs.com
caremark.com
collective.cvs.com
diamond-cvscom.devrxc.cvs.com
mypassword.cvshealth.com
RIN1TKODUL2V.corp.cvscaremark.com
www.cvs.com
hermes-dev.cvs.com
ESL_G_ZAP000.cvs.com
care1on1-pt.corp.cvs.com
rri2cimapl2v.cvs.com
PBM-Z-ZLP095.cvs.com
ESL_E_ZAP111.cvs.com
rri1rxampa50.cvs.com
rri1rxfapa50.cvs.com
valiant.cvs.com
rma1rxthtl8.cvs.com
FederationE.cvscaremark.com
picknpack.rxc.cvs.com
pharmacy.cvs.com
cvsservicemgr-uat.cvs.com
rri2domsapa1a.cvs.com
RRIWSDCF5SECCW11-1.CVS.COM
grey-surescriptsepcs-intake.devextrxc.cvs.com
dlptestEV002.cvs.com
icet-dev1.cvs.com
portaldoctool-dev.cvs.com
bronze-az-ums-esl.devrxc.cvs.com
rri1rxfapa51.cvs.com
KIOSKLAH2017DEC.CORP.CVSCAREMARK.COM
MyTableau-West.cvs.com
raz1rxfapa53.cvs.com
fuchsia-spm.devrxc.cvs.com
paz1fluarl2v.cvs.com
icet-dev1.cvs.com
test_15.4_enroll.cvs.com
diamond-callcenter.devrxc.cvs.com
crm-esl.ptrxc.cvs.com
rri2domsasa1.cvs.com
rose-ums-esl.devrxc.cvs.com
qaapih1.aetna.com
otcwsm.cvs.com
RXC-WEB-PT2-LB.cvs.com
fuchsia-ums-esl.devrxc.cvs.com
csistoreapp.cvs.com
jnlprxp.ptrxc.cvs.com
rri2iceadl1v.corp.cvs.com
crm.cvs.com
Certificate
The complete raw certificate details for otcmapi.cvs.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGsjCCBZqgAwIBAgIQCCJXzZgh/2oQ7E+kWEIomDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNDIzMDAwMDAwWhcN MjEwNTE4MTIwMDAwWjCBgzELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFJob2RlIElz bGFuZDETMBEGA1UEBxMKV29vbnNvY2tldDEXMBUGA1UEChMOQ1ZTIC8gUGhhcm1h Y3kxFTATBgNVBAsTDEkvUyBTZWN1cml0eTEYMBYGA1UEAxMPb3RjbWFwaS5jdnMu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+wxO+wNH3CvwEQX gKR5/X46mjfi4Brxj/VJDE/fpZ8enGAyqTGyWH+n7BK02N8BBzu4lboR80dQSO0m NTwEWiL6iNkKHyJtFUZovG1IMLZf3ADKM/fPgV5aHxkRmb/qjU/uh8SP05dVJpCf x/yybDYzcCv2vH1laZ9T6KDGrZN7jIixdjFOlW9h/XP/sHGdr0h7zfaW/LdWWUbN vfQmlGmYYyG4u8qBjeQFaiB6hrHIK+9HHV/h7XLK7abtKBSUIvBRJTxIBPmCjsqC iKiIDabpurjvfZLKZ779eFPtimeKSV50X3fY2jNRQZNgX7WCSnnrptaRwnBU01Eq HqB2MQIDAQABo4IDVTCCA1EwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG 2eIwHQYDVR0OBBYEFMmGC/XaIdFDAk8RvyMEHlHvJ0dgMBoGA1UdEQQTMBGCD290 Y21hcGkuY3ZzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2lj ZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdp Y2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwB ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgG BmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAA MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwCkuQmQtBhYFIe7E6LMZ3AKPDWY BPkb37jjd80OyA3cEAAAAWpL/puXAAAEAwBIMEYCIQDOxSMRs4Lx1JZ2033u4YSP tc9NDrCxgQVRvecNRFpFpgIhAN5AwMwsys+PA8dTZlBXs0oG8B16j8eGGXY+Dwkn hVZ8AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFqS/6ctQAA BAMARzBFAiATaM5m1hSXE2hX7oPQf/kdC8hpTCsDR6OMiLZ/LNPFhwIhAK9T/8l7 3AwAdPaQsDvt3wyvVJ8d6wLd/gyV7b+hVrsGAHUARJRlLrDuzq/EQAfYqP4owNrm gr7YyzG1P9MzlrW2gagAAAFqS/6bNQAABAMARjBEAiBwuCwVxqt97BF/DMe11LOt 6QkDa/cPF7RUVt6WjOqz1wIgT/cUeLIP4tGjb829o4rMnTvnfuI9/y6laD6KtruS 5gowDQYJKoZIhvcNAQELBQADggEBANFPlDCNNklScri2dsBa51ep+dwqqNvLUmdQ Psas74MqVd/ZFNfMyx2wPo1JnTswAwHWp7m9j0Q7JZF/RGN4xsaW3ifsykyyaWvn PqUbBfuZ91kR7uL4v+0tnyt5OY9+Zd7k2ki1c2jynLbpyv32uVMwRGk+EjXtJ+oE QrT3dT0QOugbsXvVIjANGnuiH3yx6DOogUSQNYanYaSyjT748Pffxkn0IKG+c2Qs UBwRUX8K8a4w/mU1UnQhdz6W1SOZUIzCxbIYSJiJp3vekDcS7zzo+kDSfO/dMvlI ZN9J1x4oywIKWJrEvb4x/NCrZ0/9sLLxVCRTsMeNScpPiEpBCc0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+wxO+wNH3CvwEQXgKR5 /X46mjfi4Brxj/VJDE/fpZ8enGAyqTGyWH+n7BK02N8BBzu4lboR80dQSO0mNTwE WiL6iNkKHyJtFUZovG1IMLZf3ADKM/fPgV5aHxkRmb/qjU/uh8SP05dVJpCfx/yy bDYzcCv2vH1laZ9T6KDGrZN7jIixdjFOlW9h/XP/sHGdr0h7zfaW/LdWWUbNvfQm lGmYYyG4u8qBjeQFaiB6hrHIK+9HHV/h7XLK7abtKBSUIvBRJTxIBPmCjsqCiKiI DabpurjvfZLKZ779eFPtimeKSV50X3fY2jNRQZNgX7WCSnnrptaRwnBU01EqHqB2 MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10812142917961166447035757392866453656 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhode Island' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Woonsocket' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CVS / Pharmacy' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I/S Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otcmapi.cvs.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29277519221366837410956676300988623561415615768197559951315369605542385280568517749557685416075375070946556314215687604716244461252577872241067265401341567189054139210232684665248816338121679133736346742559357751312571193588131295682018493371700343682790188173729046998795173282518113756439843473797779644940055099359331442457771464780462300672715639626737859464574048542424302926336456754229878514621939686986127962925986835624489799775401416665635821044361848058380191938628039972786320912250760345573143406757761711808910936723736931760631007621025897303794637026725165608164187747812119761501666713995326852724273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c9860bf5da21d143024f11bf23041e51ef274760 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otcmapi.cvs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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