LIVE.AF.CENTURYLINK.COM
- CenturyLink, Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0a:2b:b6:dd:b4:56:ab:3e:24:d0:89:2a:7c:2c:bc:7c was issued on by DigiCert Inc.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CenturyLink, Inc.
Organization:
CenturyLink, Inc.
Organization unit: Service Delivery Framework
Organization unit: Service Delivery Framework
State / Province:
Louisiana
Locality: Monroe
Country: US
Locality: Monroe
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:2b:b6:dd:b4:56:ab:3e:24:d0:89:2a:7c:2c:bc:7cSerial Number (int): 13519257686550014632849093272802212988
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dd:fc:57:63:18:ed:d4:d6:3e:20:7e:c3:4a:66:d6:1e:ab:84:1d:3d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 2a:2f:a3:e9:2d:c9:85:5f:05:9c:2b:73:5e:e3:a3:d9:0e:ee:f0:e5
Fingerprint (sha256): 02:f6:b9:68:71:69:a6:a4:92:d3:92:ac:86:4b:26:60:7a:76:49:ec:53:e6:b0:61:a8:76:ca:46:6d:66:3c:0f
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate LIVE.AF.CENTURYLINK.COM
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for LIVE.AF.CENTURYLINK.COM
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
LIVE.AF.CENTURYLINK.COM
login.centurylink.com
login.af.centurylink.com
quickconnect-api.chi.af.centurylink.com
quickconnect.chi.af.centurylink.com
quickconnect-api.dnv.af.centurylink.com
quickconnect.dnv.af.centurylink.com
login-api.centurylink.com
login-api.chi.centurylink.com
login-api.dnv.centurylink.com
live1.af.centurylink.com
live2.af.centurylink.com
live5.af.centurylink.com
live6.af.centurylink.com
corp-xzeus.af.qwest.net
xzeus.af.qwest.net
login.centurylink.com
login.af.centurylink.com
quickconnect-api.chi.af.centurylink.com
quickconnect.chi.af.centurylink.com
quickconnect-api.dnv.af.centurylink.com
quickconnect.dnv.af.centurylink.com
login-api.centurylink.com
login-api.chi.centurylink.com
login-api.dnv.centurylink.com
live1.af.centurylink.com
live2.af.centurylink.com
live5.af.centurylink.com
live6.af.centurylink.com
corp-xzeus.af.qwest.net
xzeus.af.qwest.net
Other certificates including the domain name CENTURYLINK.COM
(limited to 100 certificates)
Certificate
The complete raw certificate details for LIVE.AF.CENTURYLINK.COM in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJjzCCCHegAwIBAgIQCiu23bRWqz4k0IkqfCy8fDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMTIwMDAwMDAwWhcN MjAwNjE3MTIwMDAwWjCBlTELMAkGA1UEBhMCVVMxEjAQBgNVBAgTCUxvdWlzaWFu YTEPMA0GA1UEBxMGTW9ucm9lMRowGAYDVQQKExFDZW50dXJ5TGluaywgSW5jLjEj MCEGA1UECxMaU2VydmljZSBEZWxpdmVyeSBGcmFtZXdvcmsxIDAeBgNVBAMTF0xJ VkUuQUYuQ0VOVFVSWUxJTksuQ09NMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAx02gOvvOEJYIl0laSlob3WViuqzAo4kJr5FWzdzDhvftidFNM7bWBiQt TlIyM5AMWr4W8/gkQnLpeI/EpLYrkCO0E1tA3ZsmQg0x/NPNb1iFnUOvntArNnIk guxeOOwB5tP3fBzeeBYsURcwu77LsHixx1sTrpw5ALcn+qtzGLDf5Mf7Ycxu7gfY 7KRsA7TC/R8gCPIUcnYAIYF17ytkcNBr7l2uYCnJDwtlvmFsI7oLHTJFVOHSkdTY D2doAT1dw/SXlC8pxcyqwe4NNmgQPLYHPdLCSvm2TylQffHaYnwRJfjh1bhqNAMT s0K5ndNAgB3zns1tgo5omhUeW1LQh7wUG9k4WhVgiGllg53zQ42eROO09QAxQu79 IogPwYClNE8EsUEqUHZ7xLmK4Ub8PktaAV+m9NjhkhpvH00O6QIb0QKEfRP5P1VV IlE/UY3NyoDNt8HKpSvmNYc2uRQbUAt3oP6qfb/bIZ1sMSfxqmhbsVOdsWnFwvSe ZvUYXWCNe8wD6MBMdJ0IyLmxLEn3myUkPFHBzM/FIGL0rbJsShWlTdagO+vv0oZz QySFZGqPqRm8AV57b1fWQtrTQaYxtyLh1HIqm5oHDbO9XiTStRZBzaQjQGXHZMc7 dlZCy4FvX0IoVT02cMRErrhFV7AC1CieO8+dORFS3VFb4f3mOOsCAwEAAaOCBSAw ggUcMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTd /FdjGO3U1j4gfsNKZtYeq4QdPTCCAeEGA1UdEQSCAdgwggHUghdMSVZFLkFGLkNF TlRVUllMSU5LLkNPTYIVbG9naW4uY2VudHVyeWxpbmsuY29tghhsb2dpbi5hZi5j ZW50dXJ5bGluay5jb22CJ3F1aWNrY29ubmVjdC1hcGkuY2hpLmFmLmNlbnR1cnls aW5rLmNvbYIjcXVpY2tjb25uZWN0LmNoaS5hZi5jZW50dXJ5bGluay5jb22CJ3F1 aWNrY29ubmVjdC1hcGkuZG52LmFmLmNlbnR1cnlsaW5rLmNvbYIjcXVpY2tjb25u ZWN0LmRudi5hZi5jZW50dXJ5bGluay5jb22CGWxvZ2luLWFwaS5jZW50dXJ5bGlu ay5jb22CHWxvZ2luLWFwaS5jaGkuY2VudHVyeWxpbmsuY29tgh1sb2dpbi1hcGku ZG52LmNlbnR1cnlsaW5rLmNvbYIYbGl2ZTEuYWYuY2VudHVyeWxpbmsuY29tghhs aXZlMi5hZi5jZW50dXJ5bGluay5jb22CGGxpdmU1LmFmLmNlbnR1cnlsaW5rLmNv bYIYbGl2ZTYuYWYuY2VudHVyeWxpbmsuY29tghdjb3JwLXh6ZXVzLmFmLnF3ZXN0 Lm5ldIISeHpldXMuYWYucXdlc3QubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDov L2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6 Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMw NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0 LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2Fj ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0 MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AKS5CZC0 GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZzMiZZ0AAAQDAEYwRAIgY+yW sCrMdw1MRdxUX/6Rx+hT3suzTgPZd0OyGiefhaoCIBB6nEBXnBEP7l4txYMga9qo UZC10k8HMDUTcPbHY7JuAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g gw8AAAFnMyJmPAAABAMASDBGAiEA7adPNJQ9Rs2oEkYo24O6LiYGASiruO/0Wcm1 Fjq1XcgCIQDEOjv5sh7C/M0UaPNSJmMc+bqzzkap4yjJMvFkjPV1zwB1ALvZ37wf inG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZzMiZpEAAAQDAEYwRAIgH3eG 79OhEXbpKgWyHGVqALEiktNyWIwywv06qXnwnFUCICYdZLCV21ScRvUZ4JdWsyO9 6Glouc0Ez8aNAxUxCsCjMA0GCSqGSIb3DQEBCwUAA4IBAQCYJYpm1PaU7p5k7DKy d+VuP2177ST0VoY8SaQzCiDlY1CkrVNSuHdQ94Ndd4w1plNdiR9e09JXnOEtRsKB zyNGsZWXpvpJz8/7LygGNo+3mrZAU5Gd58Pb0Vunx8Q3wUfRwIMx4biPely0nuT8 kc91GfF5q8MoRBM41AeW+F2It2eNhACyjlZYcwa0MWM+N1GT6YGSivEMHgVI2uql Va7TJosquBNFHX2we6zTFRD0yfCjU2USTrv+VliARANYv5xXQ0qlqmBm5/NbPTNr 2sqadnit71mBwkAGVnesuxRSdBO4Y1uAwJnkpW5ZHDb73YQQODswqr2sCCzTcEVD Cb1K -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx02gOvvOEJYIl0laSlob 3WViuqzAo4kJr5FWzdzDhvftidFNM7bWBiQtTlIyM5AMWr4W8/gkQnLpeI/EpLYr kCO0E1tA3ZsmQg0x/NPNb1iFnUOvntArNnIkguxeOOwB5tP3fBzeeBYsURcwu77L sHixx1sTrpw5ALcn+qtzGLDf5Mf7Ycxu7gfY7KRsA7TC/R8gCPIUcnYAIYF17ytk cNBr7l2uYCnJDwtlvmFsI7oLHTJFVOHSkdTYD2doAT1dw/SXlC8pxcyqwe4NNmgQ PLYHPdLCSvm2TylQffHaYnwRJfjh1bhqNAMTs0K5ndNAgB3zns1tgo5omhUeW1LQ h7wUG9k4WhVgiGllg53zQ42eROO09QAxQu79IogPwYClNE8EsUEqUHZ7xLmK4Ub8 PktaAV+m9NjhkhpvH00O6QIb0QKEfRP5P1VVIlE/UY3NyoDNt8HKpSvmNYc2uRQb UAt3oP6qfb/bIZ1sMSfxqmhbsVOdsWnFwvSeZvUYXWCNe8wD6MBMdJ0IyLmxLEn3 myUkPFHBzM/FIGL0rbJsShWlTdagO+vv0oZzQySFZGqPqRm8AV57b1fWQtrTQaYx tyLh1HIqm5oHDbO9XiTStRZBzaQjQGXHZMc7dlZCy4FvX0IoVT02cMRErrhFV7AC 1CieO8+dORFS3VFb4f3mOOsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13519257686550014632849093272802212988 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Monroe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CenturyLink, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Delivery Framework' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LIVE.AF.CENTURYLINK.COM' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813086224389658536077655149768337960064856146557851866250487318427476487312927093470309956352846728489433670532517987836873906525822688647534295828856505632906026227165470741036390155161563396710498965107740942100993004344402156067304484537234085977139489535766872285532938766742709934252180839928467586253075119867817371935546695395977140298799388537225718977138900904873592546410270311327988998198734782323388465652277831136520799528157121359547874478766956669476910703876136345948015966587425807595970370827245797230075209981206184099393675490467142171669002540644693110211768266653477470826186875021341992653750812449799189150781302558572983772391820505090420189001678820291254472621889824731660777012249114416159831616993044219141834719848328316673394005076987969068138598519969029835289056634565419871168316836327449267389138989243333073746635521001280811184603551136564344716710060720250658301359844177499458884513951641481425969893100850839322759825838531670894531718874251017942350313485856233212756524622395836369302365328318806578757366691845020001381738415684419434555991826559727371424023146557246956575980521765758373054991331110304635778163355572190752750653105155327929775533715952254809720718007468974133305776945387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddfc576318edd4d63e207ec34a66d61eab841d3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (472 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LIVE.AF.CENTURYLINK.COM' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.chi.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.chi.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect-api.dnv.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickconnect.dnv.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.chi.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-api.dnv.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live1.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live2.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live5.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live6.af.centurylink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp-xzeus.af.qwest.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xzeus.af.qwest.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0098258a66d4f694ee9e64ec32b277e56e3f6d7bed24f456863c49a4330a20e56350a4ad5352b87750f7835d778c35a6535d891f5ed3d2579ce12d46c281cf2346b19597a6fa49cfcffb2f2806368fb79ab64053919de7c3dbd15ba7c7c437c147d1c08331e1b88f7a5cb49ee4fc91cf7519f179abc328441338d40796f85d88b7678d8400b28e56587306b431633e375193e981928af10c1e0548daeaa555aed3268b2ab813451d7db07bacd31510f4c9f0a35365124ebbfe565880440358bf9c57434aa5aa6066e7f35b3d336bdaca9a7678adef5981c240065677acbb14527413b8635b80c099e4a56e591c36fbdd8410383b30aabdac082cd370454309bd4a