*.sbx.sc4.medallia.com
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 79:79:e2:08:e0:f5:d7:4c:8c:1a:6b:a3:66:c4:0c:99 was issued on by SSL Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.sbx.sc4.medallia.com
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 79:79:e2:08:e0:f5:d7:4c:8c:1a:6b:a3:66:c4:0c:99Serial Number (int): 161469439937875105902672103158952758425
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 34:8c:39:61:aa:8d:7e:6b:e4:80:14:76:14:8b:51:86:72:00:aa:fb
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): c7:af:1c:18:32:8d:b5:db:9a:21:48:3e:73:1c:f5:b5:a5:9c:c4:89
Fingerprint (sha256): 02:8f:7c:c3:7e:63:86:f6:38:e8:92:c8:24:e1:31:19:72:55:a5:3a:11:e0:db:f3:ee:3d:17:05:58:a9:c9:8e
Issuing Certificate URL: http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl
Check the revocation status for certificate *.sbx.sc4.medallia.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.sbx.sc4.medallia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.sbx.sc4.medallia.com
sbx.sc4.medallia.com
sbx.sc4.medallia.com
Other certificates including the domain name medallia.com
(limited to 100 certificates)
*.aws-stg.medallia.com
1e291ab3status.snowflake.com
e2.shared.global.fastly.net
*.medallia.com
dns-vetting1c.map.fastly.net
es.medallia.com
*.sbx.usps.medallia.com
blog.medallia.com
*.jiveon.com
pt.medallia.com
1e291ab3status.snowflake.com
jobs.medallia.com
medallia.com
*.usps.medallia.com
*.digital-qa2.medallia.com
e2.shared.global.fastly.net
www.medallia.com
bp1054598.saagie.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
e2.shared.global.fastly.net
sales.medallia.com
medallia.com
*.md-apis.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.sbx.den.medallia.com
e2.shared.global.fastly.net
ocem-assessment-b2b.medallia.com
g2.shared.global.fastly.net
*.digital-cloud-syd1.medallia.com
*.digital-cloud-bofa.medallia.com
e2.shared.global.fastly.net
*.crowdicity-us1.medallia.com
*.sbx.sc4.medallia.com
*.eng.medallia.com
radius.medallia.com
e2.shared.global.fastly.net
*.iad1.medallia.com
bunnings-surveyauth-qa.customapps.medallia.com
blog.medallia.com
cvs-surveyauth-qa.customapps.medallia.com
bankofamerica.medallia.com
e2.shared.global.fastly.net
e2.shared.global.fastly.net
statuspage.io
statuspage.io
g2.shared.global.fastly.net
medallia.com
*.appsol.medallia.com
*.aws-stg.medallia.com
metrics.medallia.com
bp1054598.saagie.com
statuspage.io
*.apis.crt-qa1.den.medallia.com
zulu.tau.medallia.com
g2.shared.global.fastly.net
product-descriptions.medallia.com
cs-sm.medallia.com
*.sbx.fedw1.medallia.com
*.jed1.medallia.com
*.jed1.medallia.com
bp1054598.saagie.com
go.medallia.com
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
eola-test-survey.medallia.com
medallia.com
g2.shared.global.fastly.net
*.aws-lhr1.medallia.com
*.monkeylearn-1.sea1.medallia.com
*.eng.medallia.com
*.digital-cloud-gov-stg.medallia.com
*.apis.eng.sin1.medallia.com
e2.shared.global.fastly.net
1e291ab3status.snowflake.com
walmart-surveyauth-prod.customapps.medallia.com
*.digital-cloud-gov.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.agileresearch.medallia.com
*.fra2.medallia.com
*.sbx.voice.medallia.com
sea1.cdn.survey.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
g2.shared.global.fastly.net
api.medallia.com
*.hnd1.medallia.com
*.stella-legacy-devops.medallia.com
sales.medallia.com
dns-vetting1c.map.fastly.net
medallia.com
ix1.gc.medallia.com
medallia.com
*.sbx.ibm.medallia.com
*.stella-legacy-devops.medallia.com
1e291ab3status.snowflake.com
*.aws-pdx1.medallia.com
zenith-cb.ad.medallia.com
1e291ab3status.snowflake.com
e2.shared.global.fastly.net
*.medallia.com
dns-vetting1c.map.fastly.net
es.medallia.com
*.sbx.usps.medallia.com
blog.medallia.com
*.jiveon.com
pt.medallia.com
1e291ab3status.snowflake.com
jobs.medallia.com
medallia.com
*.usps.medallia.com
*.digital-qa2.medallia.com
e2.shared.global.fastly.net
www.medallia.com
bp1054598.saagie.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
e2.shared.global.fastly.net
sales.medallia.com
medallia.com
*.md-apis.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.sbx.den.medallia.com
e2.shared.global.fastly.net
ocem-assessment-b2b.medallia.com
g2.shared.global.fastly.net
*.digital-cloud-syd1.medallia.com
*.digital-cloud-bofa.medallia.com
e2.shared.global.fastly.net
*.crowdicity-us1.medallia.com
*.sbx.sc4.medallia.com
*.eng.medallia.com
radius.medallia.com
e2.shared.global.fastly.net
*.iad1.medallia.com
bunnings-surveyauth-qa.customapps.medallia.com
blog.medallia.com
cvs-surveyauth-qa.customapps.medallia.com
bankofamerica.medallia.com
e2.shared.global.fastly.net
e2.shared.global.fastly.net
statuspage.io
statuspage.io
g2.shared.global.fastly.net
medallia.com
*.appsol.medallia.com
*.aws-stg.medallia.com
metrics.medallia.com
bp1054598.saagie.com
statuspage.io
*.apis.crt-qa1.den.medallia.com
zulu.tau.medallia.com
g2.shared.global.fastly.net
product-descriptions.medallia.com
cs-sm.medallia.com
*.sbx.fedw1.medallia.com
*.jed1.medallia.com
*.jed1.medallia.com
bp1054598.saagie.com
go.medallia.com
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
eola-test-survey.medallia.com
medallia.com
g2.shared.global.fastly.net
*.aws-lhr1.medallia.com
*.monkeylearn-1.sea1.medallia.com
*.eng.medallia.com
*.digital-cloud-gov-stg.medallia.com
*.apis.eng.sin1.medallia.com
e2.shared.global.fastly.net
1e291ab3status.snowflake.com
walmart-surveyauth-prod.customapps.medallia.com
*.digital-cloud-gov.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.agileresearch.medallia.com
*.fra2.medallia.com
*.sbx.voice.medallia.com
sea1.cdn.survey.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
g2.shared.global.fastly.net
api.medallia.com
*.hnd1.medallia.com
*.stella-legacy-devops.medallia.com
sales.medallia.com
dns-vetting1c.map.fastly.net
medallia.com
ix1.gc.medallia.com
medallia.com
*.sbx.ibm.medallia.com
*.stella-legacy-devops.medallia.com
1e291ab3status.snowflake.com
*.aws-pdx1.medallia.com
zenith-cb.ad.medallia.com
Certificate
The complete raw certificate details for *.sbx.sc4.medallia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHUDCCBTigAwIBAgIQeXniCOD110yMGmujZsQMmTANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTIwMDEyODIzMTc1NVoXDTIyMDQwNzIzMTc1NVowITEfMB0G A1UEAwwWKi5zYnguc2M0Lm1lZGFsbGlhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ0iXl5RMqyXdQ6crit/xzYYB01+PTt+qSZ4PIUdbD9UfR1k TSoExsnLxgrgG1YLszABf2AQLPttGjZrhlucwounZEZ0BCiq0goPLY6Th8woZ6xb Xb7YNcxSuOOWUmVD26thOObApLrkgGNFd3chI7Dn27eeGYS4hrhHd4SnkSBB2sGj YNXYlEvBgtS5Cg4lDrXgkNi3V9aZLxVrULeq7RqVaFqyGv7xyM7HVHrczpAwa8UW 46GDhapXc1WCL9JaqjCNUoOW3bu1QGq2JR+Z3lD5Z8vooCS94aSNJ4d+MPdpy9Wg zhho/2cIEWYFiZ76mN9T3lxCtkyu7F2V0bZGh78CAwEAAaOCAzowggM2MB8GA1Ud IwQYMBaAFCYUfuDc16b34tQEJ99h8cLs5zLKMHwGCCsGAQUFBwEBBHAwbjBKBggr BgEFBQcwAoY+aHR0cDovL3d3dy5zc2wuY29tL3JlcG9zaXRvcnkvU1NMY29tLVN1 YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcnQwIAYIKwYBBQUHMAGGFGh0dHA6Ly9vY3Nw cy5zc2wuY29tMDcGA1UdEQQwMC6CFiouc2J4LnNjNC5tZWRhbGxpYS5jb22CFHNi eC5zYzQubWVkYWxsaWEuY29tMFEGA1UdIARKMEgwCAYGZ4EMAQIBMDwGDCsGAQQB gqkwAQMBATAsMCoGCCsGAQUFBwIBFh5odHRwczovL3d3dy5zc2wuY29tL3JlcG9z aXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMDoGA1UdHwQzMDEw L6AtoCuGKWh0dHA6Ly9jcmxzLnNzbC5jb20vU1NMY29tUlNBU1NMc3ViQ0EuY3Js MB0GA1UdDgQWBBQ0jDlhqo1+a+SAFHYUi1GGcgCq+zAOBgNVHQ8BAf8EBAMCBaAw ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2 /0q1YMG06v9eoIMPAAABb+57od8AAAQDAEcwRQIhAKfqLQOrkA3/swkhbTeWGtXL YUpjL1ArVGtGYJaxi+PtAiBMEVdnXSdsu/0yObeKuRZVDfgN3WBruJ8xUb6g7wsh 5gB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABb+57oa8AAAQD AEcwRQIhAIJd8WlsQkBbzXoeMNoQDPgzkgS8ByYuckVs5X3Wt/eTAiB0s7xeNJZv jLEP7VIx7DomkJY4xGEV05Qq2+HpJx4UEgB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4 cCUIFy+jqh0HE9MMAAABb+57okoAAAQDAEYwRAIgdhv4vbPoDuG5CUWGTaQptaKs SFi1956VDm22W56VHUECIGIdL0Q1VVk4+VHuY7u9D/UFZZ3NfUP5mcaisX07DeRI MA0GCSqGSIb3DQEBCwUAA4ICAQAKS7IRkX8dvqcgMDR8vrUzIZliB7lS9Z1+qEqT OfxayrSn+x4hZE0uKPUd+7mFJxHqWTmjaym1z3VsfAXrfV4EGk6R0WHoxu4FXYrl rvKGmQtB7Ci3ra5/vXGGmJGtVcF3blqq52i/Z/8v3kOO4VT3taXhQif+ge7HOCH1 SHwQsmUn47vYprxW7Vd33gTyB0RaDjhvSL/BWR59Oy4jFREtWM3EtQjDOXm2+4Ap EwB6cSolvL8GUFnZQgvaswCRLKzws6fVAiJsedHjYQh0u+SYEwCweG7RVZqIRUdQ bO0t8i/9k7wH7UcyPn2YyzzDa1cSSXJA/519Tk/VEpaG0FTY8KT5gn3gRq81ORFX GwBHIdY2cjg5Ei/CaYSCyw8ZY3rEJMJp/gLfmWNcaNjY7Xcf7d16ZbOuCLjNN7kW 0FCuur8rBtqa/SZVUqDeVPOV5afQ0fZskQYPi+DMvQ/XoqsCZB2y1q061bDRUDk0 q2kaRtRuezttDjKAOfx9Limtb9dRU6cNhExM7ysCKSFq4ltBTlFJIp4un0oXfzQL 3ib4et426iGHPiGmJAeXDndHJtfVnJDI2kWSphKwAfy8jzKkvEKB5g6Yr36rATHp jJ57Up1IAvSoOKKK8Ymdel5+mx0DD3FQylplGnl/x0qPvJZDy+Gvmk3jju1ncgQr i2Ainw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSJeXlEyrJd1DpyuK3/H NhgHTX49O36pJng8hR1sP1R9HWRNKgTGycvGCuAbVguzMAF/YBAs+20aNmuGW5zC i6dkRnQEKKrSCg8tjpOHzChnrFtdvtg1zFK445ZSZUPbq2E45sCkuuSAY0V3dyEj sOfbt54ZhLiGuEd3hKeRIEHawaNg1diUS8GC1LkKDiUOteCQ2LdX1pkvFWtQt6rt GpVoWrIa/vHIzsdUetzOkDBrxRbjoYOFqldzVYIv0lqqMI1Sg5bdu7VAarYlH5ne UPlny+igJL3hpI0nh34w92nL1aDOGGj/ZwgRZgWJnvqY31PeXEK2TK7sXZXRtkaH vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 161469439937875105902672103158952758425 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 23:17:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 23:17:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sbx.sc4.medallia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19836361681133392688783764596081158375115736832856532244140612655824002862950555758647920007758218533653979683868246839877155692662240034007238931455263701837623685366002652672876474438006025748383718697225785524193944355187457376209882031571285169356540002588731620130489545592796986779798554794979026074695069844895877019839243646275825175214228174200109021651040687729603655194377240294434350983305508252465093083351973170301921037225657374347891977108103041508616220755428981538607283589313320386614167417437546831163093612243712888830872169746846798017705582047601843189191086325894106837883314521402924685756351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbx.sc4.medallia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbx.sc4.medallia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 348c3961aa8d7e6be4801476148b51867200aafb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 000a4bb211917f1dbea72030347cbeb53321996207b952f59d7ea84a9339fc5acab4a7fb1e21644d2e28f51dfbb9852711ea5939a36b29b5cf756c7c05eb7d5e041a4e91d161e8c6ee055d8ae5aef286990b41ec28b7adae7fbd71869891ad55c1776e5aaae768bf67ff2fde438ee154f7b5a5e14227fe81eec73821f5487c10b26527e3bbd8a6bc56ed5777de04f207445a0e386f48bfc1591e7d3b2e2315112d58cdc4b508c33979b6fb802913007a712a25bcbf065059d9420bdab300912cacf0b3a7d502226c79d1e3610874bbe4981300b0786ed1559a884547506ced2df22ffd93bc07ed47323e7d98cb3cc36b5712497240ff9d7d4e4fd5129686d054d8f0a4f9827de046af353911571b004721d636723839122fc2698482cb0f19637ac424c269fe02df99635c68d8d8ed771feddd7a65b3ae08b8cd37b916d050aebabf2b06da9afd265552a0de54f395e5a7d0d1f66c91060f8be0ccbd0fd7a2ab02641db2d6ad3ad5b0d1503934ab691a46d46e7b3b6d0e328039fc7d2e29ad6fd75153a70d844c4cef2b0229216ae25b414e5149229e2e9f4a177f340bde26f87ade36ea21873e21a62407970e774726d7d59c90c8da4592a612b001fcbc8f32a4bc4281e60e98af7eab0131e98c9e7b529d4802f4a838a28af1899d7a5e7e9b1d030f7150ca5a651a797fc74a8fbc9643cbe1af9a4de38eed6772042b8b60229f