autodiscover.nsrootdev.net
- Citigroup Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 0d:22:07:e3:40:96:4d:95:fd:3f:e7:14:50:8a:e4:96 was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Citigroup Inc.
Company registration number:
2154254
Organization: Citigroup Inc.
Organization unit: OU
Organization: Citigroup Inc.
Organization unit: OU
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:22:07:e3:40:96:4d:95:fd:3f:e7:14:50:8a:e4:96Serial Number (int): 17456662020042952677358015033635431574
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d4:4e:6c:7c:60:65:83:1a:fb:e2:82:be:9a:04:06:79:53:23:52:af
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 81:16:cd:fb:71:7f:53:69:b0:b0:e3:21:a6:f9:78:03:8e:eb:be:c7
Fingerprint (sha256): 02:fa:cf:a5:be:e8:5f:18:10:95:9c:55:47:d4:c3:1c:9b:53:ef:31:a1:0c:5b:03:43:7d:fc:1f:12:53:4c:5d
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate autodiscover.nsrootdev.net
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for autodiscover.nsrootdev.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nsrootdev.net
mail.nsrootdev.net
autodiscover.nsrootdev.net
autodiscover.nsrootdev8.net
nsrootdev8.net
mail.nsrootdev8.net
mail.nsrootdev.net
autodiscover.nsrootdev.net
autodiscover.nsrootdev8.net
nsrootdev8.net
mail.nsrootdev8.net
Other certificates including the domain name nsrootdev.net
(limited to 100 certificates)
icl-cdma-vm01.namdev.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
ICL-LYNC13-LPC1.namdev.nsrootdev.net
icl-imexpt-vm01.namdev.nsrootdev.net
vm-unam1-cipp01.namdev.nsrootdev.net
i10-cic-vm03.namdev.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev3.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
ICL-LYNC13-LD2.namdev.nsrootdev.net
Poolnamdev1.namdev.nsrootdev.net
vm-unam1-cipp01.namdev.nsrootdev.net
I10-LYNC-VM06.namdev.nsrootdev.net
AutoDiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
cups864-1.nsrootdev.net
pocsbc.nsrootdev.net
cups864-1.nsrootdev.net
ICL-LYNC13-LD1.namdev.nsrootdev.net
Poolnamdev1.namdev.nsrootdev.net
lync13poolnamdev4.namdev.nsrootdev.net
pocsbc.nsrootdev.net
pocsbc.nsrootdev.net
lyncgwcluster02.namdev.nsrootdev.net
vm-ubplab14-cipp01.nsrootdev.net
icl-emmrfi-vm01.namdev.nsrootdev.net
edgepoolbudapest.namdev.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
vm-ubplab14-cipp01.nsrootdev.net
war-aes-lync.namdev.nsrootdev.net
autodiscover.nsrootdev.net
webrtcsbc.namdev.nsrootdev.net
pocsbc.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
icl-imexp-vm01.namdev.nsrootdev.net
lync13poolnamdev2.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
autodiscover.nsrootdev.net
AutoDiscover.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
pocsbc.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
pocsbc.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
ICL-LYNC13-LPC1.namdev.nsrootdev.net
icl-imexpt-vm01.namdev.nsrootdev.net
vm-unam1-cipp01.namdev.nsrootdev.net
i10-cic-vm03.namdev.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev3.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
ICL-LYNC13-LD2.namdev.nsrootdev.net
Poolnamdev1.namdev.nsrootdev.net
vm-unam1-cipp01.namdev.nsrootdev.net
I10-LYNC-VM06.namdev.nsrootdev.net
AutoDiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
cups864-1.nsrootdev.net
pocsbc.nsrootdev.net
cups864-1.nsrootdev.net
ICL-LYNC13-LD1.namdev.nsrootdev.net
Poolnamdev1.namdev.nsrootdev.net
lync13poolnamdev4.namdev.nsrootdev.net
pocsbc.nsrootdev.net
pocsbc.nsrootdev.net
lyncgwcluster02.namdev.nsrootdev.net
vm-ubplab14-cipp01.nsrootdev.net
icl-emmrfi-vm01.namdev.nsrootdev.net
edgepoolbudapest.namdev.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
vm-ubplab14-cipp01.nsrootdev.net
war-aes-lync.namdev.nsrootdev.net
autodiscover.nsrootdev.net
webrtcsbc.namdev.nsrootdev.net
pocsbc.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
icl-imexp-vm01.namdev.nsrootdev.net
lync13poolnamdev2.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
autodiscover.nsrootdev.net
AutoDiscover.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
pocsbc.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
pocsbc.nsrootdev.net
Certificate
The complete raw certificate details for autodiscover.nsrootdev.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIQDSIH40CWTZX9P+cUUIrkljANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDcxOTAwMDAwMFoXDTIwMDcxOTEy MDAwMFowgd8xHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCERlbGF3YXJlMRAwDgYDVQQF EwcyMTU0MjU0MQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNV BAcTCE5ldyBZb3JrMRcwFQYDVQQKEw5DaXRpZ3JvdXAgSW5jLjELMAkGA1UECxMC T1UxIzAhBgNVBAMTGmF1dG9kaXNjb3Zlci5uc3Jvb3RkZXYubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CdjeQ7/6WW0zqJ6j2rzS3NfhRWETVYi kEtYVLyfpD54XV93oFslWHwZtfqlzG972eF1TjkuE2W7NThSzBphsP6gW7mZHNR0 mggyyCi5HDyU3Fn5NwmJ5VWCLxWA2seJUPq8d76MOeEcr0gEVc60b1bIgoN4kWKq /7TXoVkOM6WGHFhHyI5AU/4r+BmZNo5RBCUr7M2dIAk+/rPg/TLl51qEtw5qhnEq mHyjqrCYKzzDAjGc0lRaicXYXCYA/i5QWR7yW1zXwl6Hjl/PK0+P7QfwbIKygZHh oIGkkjGKuHbRq4HDwaY/esiMpgOP2nK6ejSjIzBwWFQAK9AVKafxNQIDAQABo4IC cTCCAm0wHwYDVR0jBBgwFoAUPdNQpdagre7zSmAKZdMh1Pj41g8wHQYDVR0OBBYE FNRObHxgZYMa++KCvpoEBnlTI1KvMIGMBgNVHREEgYQwgYGCDW5zcm9vdGRldi5u ZXSCEm1haWwubnNyb290ZGV2Lm5ldIIaYXV0b2Rpc2NvdmVyLm5zcm9vdGRldi5u ZXSCG2F1dG9kaXNjb3Zlci5uc3Jvb3RkZXY4Lm5ldIIObnNyb290ZGV2OC5uZXSC E21haWwubnNyb290ZGV2OC5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3Js My5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzIuY3JsMDSgMqAwhi5odHRw Oi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzIuY3JsMEsGA1Ud IAREMEIwNwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEwgYgGCCsGAQUFBwEBBHwwejAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFIGCCsGAQUFBzAChkZodHRw Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyRXh0ZW5kZWRWYWxp ZGF0aW9uU2VydmVyQ0EuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBADnMQZO+Cjvpr/wGKZ5h8k3g1PJwC+5qBnE6 VmN4F9tqZniH42mBv3WbuLdDQ5tU1XdRw8EO11Pe/xTM2HFFCxhwv4UMM9Ou2vsQ uXzVjGM+XnUt4FvUheI722PBOkV4/mihGjfN4DJJ7sBlrB1saYIHr0z+qdmN0XD5 5LHAZ3VtA6WxD48PVAvJJGJM/uusqfTOHvSAioBPaVt6NV7CFDndnJCeVeT97vKP hhev4ggRvXmfiba7L6MJxgbwEITBr3j9B/L8IamxdXyD4HOp9bZPzRKteQlq8lZ3 3H08Hk/rFyNOOtsaktHezGStxLY/U/Gs7gM6M6NpbXrtzTiJABc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CdjeQ7/6WW0zqJ6j2rz S3NfhRWETVYikEtYVLyfpD54XV93oFslWHwZtfqlzG972eF1TjkuE2W7NThSzBph sP6gW7mZHNR0mggyyCi5HDyU3Fn5NwmJ5VWCLxWA2seJUPq8d76MOeEcr0gEVc60 b1bIgoN4kWKq/7TXoVkOM6WGHFhHyI5AU/4r+BmZNo5RBCUr7M2dIAk+/rPg/TLl 51qEtw5qhnEqmHyjqrCYKzzDAjGc0lRaicXYXCYA/i5QWR7yW1zXwl6Hjl/PK0+P 7QfwbIKygZHhoIGkkjGKuHbRq4HDwaY/esiMpgOP2nK6ejSjIzBwWFQAK9AVKafx NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17456662020042952677358015033635431574 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Citigroup Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autodiscover.nsrootdev.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26781943878591622613380463152357273270581267412459534768050062510696971474398318915448138048850958965604608830314489012109435573599541805088263560737188395484270239744447940354951451856818326124281052680746433876548974342530876137379934752030596267161739853045112937558649651443283876826885567698057716248058537511150581202782414021453785857524739222242788635843844345993616916831303594625486068040149315927279047561627138524266550442091550669484845001310355156066012507154640877568177552838630475470003079501970231239432424421797193116802157667935066418533914723510918943490634646886461248013362987788734386204569909 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d44e6c7c6065831afbe282be9a040679532352af . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsrootdev.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nsrootdev.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nsrootdev.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nsrootdev8.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsrootdev8.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nsrootdev8.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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