kdc-secure.business.libertymutualgroup.com
- Liberty Mutual Group -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 0c:63:27:6b:59:a7:a9:96:b7:2c:9c:9b:9e:bc:39:42 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Liberty Mutual Group
Organization:
Liberty Mutual Group
Organization unit: Commercial Insurance
Organization unit: Commercial Insurance
State / Province:
New Hampshire
Locality: Portsmouth
Country: US
Locality: Portsmouth
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:63:27:6b:59:a7:a9:96:b7:2c:9c:9b:9e:bc:39:42Serial Number (int): 16465572857548727197622527327228148034
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b8:d9:d8:f6:86:87:f1:5b:93:d7:58:5e:da:85:5f:d5:a2:47:3b:9d
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): c9:a2:39:47:54:f7:c8:fe:b4:33:7c:ea:6e:ad:9c:e6:c8:50:75:58
Fingerprint (sha256): 02:47:39:cb:9f:c2:6a:7f:94:b8:9a:58:e1:44:82:0f:f6:1f:9d:26:c4:b6:dc:c0:96:33:bb:9f:09:ba:5b:82
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate kdc-secure.business.libertymutualgroup.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kdc-secure.business.libertymutualgroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kdc-secure.business.libertymutualgroup.com
Other certificates including the domain name libertymutualgroup.com
(limited to 100 certificates)
PeopleAtLiberty.com
wcvideo.libertymutualgroup.com
test-securefile.libertymutual.com
stage-stui.libertymutualgroup.com
libertymutual.myinstantincentives.com
cicct-taskrouter-gateway.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
test-equote.libertymutual.com
vantageporttest.libertymutual.com
kdc-secure.business.libertymutualgroup.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
perf.libertymutualgroup.com
www.libertymutualgroup.com
test-icasemanagersecure.libertymutual.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
stage-stui.libertymutualgroup.com
whalebot.libertymutual.com
dev.lmemergencyportal.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
tst-business.libertymutualgroup.com
whalebot.libertymutual.com
perf-www.libertymutualvantageport.com
PeopleAtLiberty.com
stui.libertymutualgroup.com
techcampus.libertymutual.com
securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
ni-newsbrief.libertymutualgroup.com
tst.libertymutualgroup.com
www.careers-test.libertymutualgroup.com
libertymutual.myinstantincentives.com
www.business.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
af.libertymutualgroup.com
stage-af.libertymutualgroup.com
techcampus.libertymutual.com
test-claimseft.libertymutualgroup.com
securefile.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
perf-tuition.libertymutual.com
test-securefile.libertymutual.com
whalebot.libertymutual.com
steps.libertymutualgroup.com
securefile.libertymutual.com
wcvideo.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
business.libertymutualgroup.com
business.libertymutualgroup.com
tst-wcvideo.libertymutualgroup.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
techcampus.libertymutual.com
test-icasemanagersecure.libertymutual.com
libertymutual.myinstantincentives.com
techcampus.libertymutual.com
af.libertymutual.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
perf-www.libertymutualvantageport.com
cicct-taskrouter-gateway.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
perf-www.libertymutualvantageport.com
www.careers-test.libertymutualgroup.com
test-securefile.libertymutual.com
PeopleAtLiberty.com
www.careers-test.libertymutualgroup.com
techcampus.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
cicct-taskrouter-gateway.libertymutual.com
securefile.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
test-securefile.libertymutual.com
www.libertymutualgroup.com
techcampus.libertymutual.com
wcvideo.libertymutualgroup.com
test-securefile.libertymutual.com
stage-stui.libertymutualgroup.com
libertymutual.myinstantincentives.com
cicct-taskrouter-gateway.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
test-equote.libertymutual.com
vantageporttest.libertymutual.com
kdc-secure.business.libertymutualgroup.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
perf.libertymutualgroup.com
www.libertymutualgroup.com
test-icasemanagersecure.libertymutual.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
stage-stui.libertymutualgroup.com
whalebot.libertymutual.com
dev.lmemergencyportal.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
tst-business.libertymutualgroup.com
whalebot.libertymutual.com
perf-www.libertymutualvantageport.com
PeopleAtLiberty.com
stui.libertymutualgroup.com
techcampus.libertymutual.com
securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
ni-newsbrief.libertymutualgroup.com
tst.libertymutualgroup.com
www.careers-test.libertymutualgroup.com
libertymutual.myinstantincentives.com
www.business.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
af.libertymutualgroup.com
stage-af.libertymutualgroup.com
techcampus.libertymutual.com
test-claimseft.libertymutualgroup.com
securefile.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
perf-tuition.libertymutual.com
test-securefile.libertymutual.com
whalebot.libertymutual.com
steps.libertymutualgroup.com
securefile.libertymutual.com
wcvideo.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
business.libertymutualgroup.com
business.libertymutualgroup.com
tst-wcvideo.libertymutualgroup.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
techcampus.libertymutual.com
test-icasemanagersecure.libertymutual.com
libertymutual.myinstantincentives.com
techcampus.libertymutual.com
af.libertymutual.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
perf-www.libertymutualvantageport.com
cicct-taskrouter-gateway.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
perf-www.libertymutualvantageport.com
www.careers-test.libertymutualgroup.com
test-securefile.libertymutual.com
PeopleAtLiberty.com
www.careers-test.libertymutualgroup.com
techcampus.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
cicct-taskrouter-gateway.libertymutual.com
securefile.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
test-securefile.libertymutual.com
www.libertymutualgroup.com
techcampus.libertymutual.com
Certificate
The complete raw certificate details for kdc-secure.business.libertymutualgroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIQDGMna1mnqZa3LJybnrw5QjANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwMTMxMDAwMDAwWhcNMjEwMzA0MTIw MDAwWjCBrTELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU5ldyBIYW1wc2hpcmUxEzAR BgNVBAcTClBvcnRzbW91dGgxHTAbBgNVBAoTFExpYmVydHkgTXV0dWFsIEdyb3Vw MR0wGwYDVQQLExRDb21tZXJjaWFsIEluc3VyYW5jZTEzMDEGA1UEAxMqa2RjLXNl Y3VyZS5idXNpbmVzcy5saWJlcnR5bXV0dWFsZ3JvdXAuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokuwyoHScV/dvAJI3ELpQMqkli+cdA4NGltK xmTaK7PFSiEwH/QzvyvjyoXz0i0q947B6i47hjA3WUh69fnxka5Qvr5GDpe4XUXy Wcdi08/le9qYfh/s+hvG77gtF4g9S+ScYw7e5HlEYGJUolZ9hQzU0XkAOXRPB9c4 lR9i7QQgHjwb8VaXvf3DULzApp9FubTHkHdXVQelrYnSJlET12o57z6aK49orJb0 bLErJQyLt9hf1dZa+4p9KtG6CgVl2np3ac2bPHm4zBuJLae4WBuykIs0JrPh9/kk 3jQ0YiRSAJWDlV2dbwfBCVFU57h5ja6cKqWg74Lyc7VgMrl8/wIDAQABo4ICBzCC AgMwHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0OBBYEFLjZ 2PaGh/Fbk9dYXtqFX9WiRzudMDUGA1UdEQQuMCyCKmtkYy1zZWN1cmUuYnVzaW5l c3MubGliZXJ0eW11dHVhbGdyb3VwLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMDWgM6Ax hi9odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNy bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB0BggrBgEFBQcBAQRoMGYw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcw AoYyaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FH Mi5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEAnsvv+4SOSEi8gxFPkBFlhrQWgjt4jGD+whs20ifu8UPdXxYGiq/s /uh7NLEMfR1doof2hMFPxZMIgSloGN5eXF0Cke+cTqTeLjJYUe476S9qC6wzyl+X 1O2UOgtiRQARV+cN+MNslKLIgETR7/xIkgITPUEH0zgKGJ+gEuEtIwCnS+P+b+fj 7s90seaP4mkeolqHrS53svvsNioIcGRSWs8UdgGlAEQTiRFcLqYlSzwzsWgo98u4 i3NlbWw0AYYGjWwBjhARk/Ez38RusPbdt7uoGV/Bc6VEzzEbdJQwEPD+G5SyZ03c 1EDoD2fkMHtkHRyIEI5f/fmbPHw467mUEQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokuwyoHScV/dvAJI3ELp QMqkli+cdA4NGltKxmTaK7PFSiEwH/QzvyvjyoXz0i0q947B6i47hjA3WUh69fnx ka5Qvr5GDpe4XUXyWcdi08/le9qYfh/s+hvG77gtF4g9S+ScYw7e5HlEYGJUolZ9 hQzU0XkAOXRPB9c4lR9i7QQgHjwb8VaXvf3DULzApp9FubTHkHdXVQelrYnSJlET 12o57z6aK49orJb0bLErJQyLt9hf1dZa+4p9KtG6CgVl2np3ac2bPHm4zBuJLae4 WBuykIs0JrPh9/kk3jQ0YiRSAJWDlV2dbwfBCVFU57h5ja6cKqWg74Lyc7VgMrl8 /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16465572857548727197622527327228148034 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commercial Insurance' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kdc-secure.business.libertymutualgroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20487929825537320648989675015093017740511851548074279150225785284312689997728126234616804273959642016080692180671777852148371928849224988441324293257570097323269266065899384754685100662363847957771047779799054318676986436120291740293752313675146443449755563233476541715264326425664557148333447235054938402774893626901023076961780351783929387571727410198805914859708013077770640814179562794868987475272199625564835850738795629077552515185720606498865946476551655868784930143116144928422450407255429126448452303334573972389312296091860336870961492231838841888771979005502705325398976763867697023290552383726840232639743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b8d9d8f68687f15b93d7585eda855fd5a2473b9d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdc-secure.business.libertymutualgroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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