iq.qa.paypal.com
- PayPal, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:04:c6:fb:06:50:42:fe:6c:a2:76:bc:ff:4b:c7:09 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
PayPal, Inc.
Organization:
PayPal, Inc.
Organization unit: PayPal Production Support
Organization unit: PayPal Production Support
State / Province:
California
Locality: San Jose
Country: US
Locality: San Jose
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:04:c6:fb:06:50:42:fe:6c:a2:76:bc:ff:4b:c7:09Serial Number (int): 1354032988543309788496661102451214089
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 0d:c7:df:7a:08:fd:4a:56:b0:9a:72:3e:79:6f:3a:74:47:d2:e2:cf
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 2a:08:23:2b:3e:ea:fe:a3:cd:45:c7:35:eb:97:0d:9c:c9:fd:8d:21
Fingerprint (sha256): 02:e3:84:2a:73:26:66:5a:9e:53:86:f7:a1:b3:fd:7a:5a:e2:9d:3b:40:f8:ff:b4:40:2d:3f:33:ed:3d:bd:89
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate iq.qa.paypal.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iq.qa.paypal.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iq.qa.paypal.com
Other certificates including the domain name paypal.com
(limited to 100 certificates)
beta.developer.paypal.com
c.paypal.com
topo.es.paypalcorp.com
securepayments.paypal.com
www.paypal-business.com.au
image.ma.mirashiru.dai-ichi-life.co.jp
partner2.stage.paypal.com
payflow.paypalinc.com
pics.paypal.com
www.sandbox.paypal.com
te-dash.qa.paypal.com
svcs.paypal.com
stage2mb-vip6.stage.paypal.com
manager.paypal.com
api-m.paypal.com
www.clt.stage.paypal.com
DUBSIPLB.corp.ebay.com
san-41-s12.tlsprovisioning.exacttarget.com
creditapply.paypal.com
3ph.paypalcorp.com
safetyhub.paypalcorp.com
api-s.paypal.com
api.sandbox.paypal.com
pandora.paypal.com
partnermanager.paypal.com
tcmextserv-vip.qa.paypal.com
omsdev.qa.paypal.com
san-41-s12.tlsprovisioning.exacttarget.com
dbadashboard-host.qa.paypal.com
cloud.mktg1.paypal.com
svcs.paypal.com
aktest.paypal.com
ssltest.paypal.com
old-api-3t.sandbox.paypal.com
pdn.paypal.com
pcuc1cautgen01.qa.paypal.com
partner-monitoring.paypal.com
slcctrlmem02a.slc.paypal.com
trackmate-dev.qa.paypal.com
iq.qa.paypal.com
www.test49.stage.paypal.com
www.sandbox.paypal.com
hcaptcha.paypal.com
pointofsale.sandbox.paypal.com
paypalmanager.sandbox.paypal.com
cei9.stage.paypal.com
te-alm-41146932105464054535798.qa.paypal.com
tdpjacococlientserv.qa.paypal.com
svcs.paypal.com
history.paypal.com
fss-ld-geo.qa.paypal.com
PayPal, Inc.
paypal.com
pwr-ep.paypal.com
clustercustodian.qa.paypal.com
bt-infra-ci.qa.paypal.com
www.paypal-blueprint.com
www.paypal.com
compliance-admin.paypal.com
business.sandbox.paypal.com
beacons.sbox.stats.paypal.com
merchantgeneratordev.qa.paypal.com
cei7.stage.paypal.com
slcnoctools1b.slc.paypal.com
xmlapi.sandbox.paypal.com
api-s.paypal.com
www.credit.stage.paypal.com
githubgcp.qa.paypal.com
stage2mb-vip4.stage.paypal.com
www.sandbox.paypal.com
registration.sandbox.paypal.com
api.financing.paypal.com
cei4.stage.paypal.com
stage2mb-vip19.stage.paypal.com
dalmserv-ms-geo.qa.paypal.com
observability-msmaster.qa.paypal.com
www.sandbox.paypal.com
mscal-host.qa.paypal.com
phx1webmill1.phx.paypalinc.com
heredev.paypal.com
pcuc1cautgen01.qa.paypal.com
te-rt-email-builder.qa.paypal.com
paypalreports-host.paypalinc.com
posprivate-api.paypal.com
www.paypalobjects.com
appworx-vip.slc.paypal.com
www.browserstack.stage.paypal.com
dldpexternal.qa.paypal.com
p.paypal.com
pwr-ep.paypal.com
stage2cpp127.qa.paypal.com
gops-weblogic-admin.paypal.com
www.salesforce.csi.stage.paypal.com
stage2mb-vip10.stage.paypal.com
engagepeople.uat-api.qa.paypal.com
testdatapublisher.qa.paypal.com
www.paypal-status.com
san-41-s12.tlsprovisioning.exacttarget.com
www.test11.stage.paypal.com
c.paypal.com
topo.es.paypalcorp.com
securepayments.paypal.com
www.paypal-business.com.au
image.ma.mirashiru.dai-ichi-life.co.jp
partner2.stage.paypal.com
payflow.paypalinc.com
pics.paypal.com
www.sandbox.paypal.com
te-dash.qa.paypal.com
svcs.paypal.com
stage2mb-vip6.stage.paypal.com
manager.paypal.com
api-m.paypal.com
www.clt.stage.paypal.com
DUBSIPLB.corp.ebay.com
san-41-s12.tlsprovisioning.exacttarget.com
creditapply.paypal.com
3ph.paypalcorp.com
safetyhub.paypalcorp.com
api-s.paypal.com
api.sandbox.paypal.com
pandora.paypal.com
partnermanager.paypal.com
tcmextserv-vip.qa.paypal.com
omsdev.qa.paypal.com
san-41-s12.tlsprovisioning.exacttarget.com
dbadashboard-host.qa.paypal.com
cloud.mktg1.paypal.com
svcs.paypal.com
aktest.paypal.com
ssltest.paypal.com
old-api-3t.sandbox.paypal.com
pdn.paypal.com
pcuc1cautgen01.qa.paypal.com
partner-monitoring.paypal.com
slcctrlmem02a.slc.paypal.com
trackmate-dev.qa.paypal.com
iq.qa.paypal.com
www.test49.stage.paypal.com
www.sandbox.paypal.com
hcaptcha.paypal.com
pointofsale.sandbox.paypal.com
paypalmanager.sandbox.paypal.com
cei9.stage.paypal.com
te-alm-41146932105464054535798.qa.paypal.com
tdpjacococlientserv.qa.paypal.com
svcs.paypal.com
history.paypal.com
fss-ld-geo.qa.paypal.com
PayPal, Inc.
paypal.com
pwr-ep.paypal.com
clustercustodian.qa.paypal.com
bt-infra-ci.qa.paypal.com
www.paypal-blueprint.com
www.paypal.com
compliance-admin.paypal.com
business.sandbox.paypal.com
beacons.sbox.stats.paypal.com
merchantgeneratordev.qa.paypal.com
cei7.stage.paypal.com
slcnoctools1b.slc.paypal.com
xmlapi.sandbox.paypal.com
api-s.paypal.com
www.credit.stage.paypal.com
githubgcp.qa.paypal.com
stage2mb-vip4.stage.paypal.com
www.sandbox.paypal.com
registration.sandbox.paypal.com
api.financing.paypal.com
cei4.stage.paypal.com
stage2mb-vip19.stage.paypal.com
dalmserv-ms-geo.qa.paypal.com
observability-msmaster.qa.paypal.com
www.sandbox.paypal.com
mscal-host.qa.paypal.com
phx1webmill1.phx.paypalinc.com
heredev.paypal.com
pcuc1cautgen01.qa.paypal.com
te-rt-email-builder.qa.paypal.com
paypalreports-host.paypalinc.com
posprivate-api.paypal.com
www.paypalobjects.com
appworx-vip.slc.paypal.com
www.browserstack.stage.paypal.com
dldpexternal.qa.paypal.com
p.paypal.com
pwr-ep.paypal.com
stage2cpp127.qa.paypal.com
gops-weblogic-admin.paypal.com
www.salesforce.csi.stage.paypal.com
stage2mb-vip10.stage.paypal.com
engagepeople.uat-api.qa.paypal.com
testdatapublisher.qa.paypal.com
www.paypal-status.com
san-41-s12.tlsprovisioning.exacttarget.com
www.test11.stage.paypal.com
Certificate
The complete raw certificate details for iq.qa.paypal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIQAQTG+wZQQv5sona8/0vHCTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODA1MTgwMDAwMDBaFw0yMDA1MjIxMjAwMDBa MIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTERMA8GA1UEBxMI U2FuIEpvc2UxFTATBgNVBAoTDFBheVBhbCwgSW5jLjEiMCAGA1UECxMZUGF5UGFs IFByb2R1Y3Rpb24gU3VwcG9ydDEZMBcGA1UEAxMQaXEucWEucGF5cGFsLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALToh5vVXiZWhRVdRVYSKg1e z+GN8xpWPSLtvl98Gc4FbAHwllsOqWC7eTj3T+93KMV4jknl1WPTwPkkrWqzBZn5 RyC3bhEaAPbTtoyfrc6/woa7Vhq5J1cPMCwDpDvujKieiXtENmhMFYOJSnhK+Rxc aMQoRhQ/rLSbmTGpNi8iDgZK1zUphUehx78ixrub+Y7XX4gqQFNoisr5Qee+Z+dF P1jw8EutBOyx1EFrqXMmGBd+kqe8M12opKkP8kl+IodI5SB9bY0wZFSnh6Mw4ZeW YzTG1HZBG3WVPSyt+2G53d1LbMcnb76CCdSRe3Gbd4gQfhDaxm/+Y/Viq9ziN3kC AwEAAaOCAf4wggH6MB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0G A1UdDgQWBBQNx996CP1KVrCacj55bzp0R9LizzAbBgNVHREEFDASghBpcS5xYS5w YXlwYWwuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQu Y29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGln aWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCG SAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v Q1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0Eu Y3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggEBAE/2GL5AK8gTLC0gckE5F8Pkhaw/ZWC0JgjevcW2R0Z7MQ/SQjDV Bd7gFntI+GWYrPYjVCTQSSqnOUxyoA09nuAZ6rrTRgQ4vrNpeFkYJZlpHy+A35xB Rvn3Nsn1IlMr9Ai10AMQt8k2cmFXXeq4wQYy5uy/jvb9s9+x46zM7myMzrcRQqSi K98LeRppxQtNLTnxIuKBFWrfL3bJ4ew2YiteW0cRPPT5v5p9X+2UsxtmnjCDvdFc iJAUVcUisY4CNNBumEg6QdqcPHk6s/RjMT9uMVtfa2O7Es4qmZlJk8Tq0hmcjBPR uEIcS7Xj7xQVw8yf7gvKvDjru1MSrA7SGSg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOiHm9VeJlaFFV1FVhIq DV7P4Y3zGlY9Iu2+X3wZzgVsAfCWWw6pYLt5OPdP73coxXiOSeXVY9PA+SStarMF mflHILduERoA9tO2jJ+tzr/ChrtWGrknVw8wLAOkO+6MqJ6Je0Q2aEwVg4lKeEr5 HFxoxChGFD+stJuZMak2LyIOBkrXNSmFR6HHvyLGu5v5jtdfiCpAU2iKyvlB575n 50U/WPDwS60E7LHUQWupcyYYF36Sp7wzXaikqQ/ySX4ih0jlIH1tjTBkVKeHozDh l5ZjNMbUdkEbdZU9LK37Ybnd3UtsxydvvoIJ1JF7cZt3iBB+ENrGb/5j9WKr3OI3 eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1354032988543309788496661102451214089 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayPal, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayPal Production Support' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iq.qa.paypal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22837559573212781043452539733318967609805551854952781248200150428238585074188026847254955109807305121603327385113947355282780992049649862846003101851882905564740500418895453277713497243297795537783767123028599465664535394389229934923729609807779942949399606222859417068670048164308279394661459810837007098018750666194470769941379579083565032188676996748130146856008672480781508994625832388710801090860742494733269211943910705374776156520719676281645969748603370402771722943054539378093091328327750843717982279394847879937265349645006587412463444675007886803104665658405930419483960346165764496056828708526556505585529 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0dc7df7a08fd4a56b09a723e796f3a7447d2e2cf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iq.qa.paypal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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