lp-cfhub01.ornl.gov
- Oak Ridge National Laboratory -
Issued by InCommon RSA Server CA 2
About this certificate
This digital certificate with serial number 06:12:7d:f4:21:bc:9a:5b:b6:1b:37:ce:c1:58:8a:28 was issued on by Internet2.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Oak Ridge National Laboratory
Organization:
Oak Ridge National Laboratory
State / Province:
Tennessee
Country: US
Country: US
Internet2
Organization:
Internet2
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:12:7d:f4:21:bc:9a:5b:b6:1b:37:ce:c1:58:8a:28Serial Number (int): 8071383961476244388443911012857973288
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 75:e4:a2:dd:8d:27:a0:d2:66:11:3b:4b:81:92:88:10:8b:7e:ee:1f
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9
Fingerprint (sha1): 71:5e:18:f2:88:95:a2:d3:71:70:45:fa:e7:15:19:9f:ed:68:81:d7
Fingerprint (sha256): 03:2d:c9:ff:e2:26:8c:7c:b5:43:73:bc:7e:ee:9e:ac:c0:10:23:db:0d:4f:dc:b5:33:2e:06:d0:c4:43:18:b4
Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl
Check the revocation status for certificate lp-cfhub01.ornl.gov
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lp-cfhub01.ornl.gov
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lp-cfhub01.ornl.gov
Other certificates including the domain name ornl.gov
(limited to 100 certificates)
5098030885765120-fe4.pantheonsite.io
internal.webmap.ornl.gov
radware.phy.ornl.gov
www.arm.gov
jenkins.ccs.ornl.gov
ccms-cdash.ornl.gov
cades.ornl.gov
Recruiting-tst-internal.ornl.gov
armweb0-stgcms.ornl.gov
5098030885765120-fe4.pantheonsite.io
5098030885765120-fe4.pantheonsite.io
radware.phy.ornl.gov
itsdpro.ornl.gov
ornlsurv02.ornl.gov
radware.phy.ornl.gov
eber.ed.ornl.gov
vpnprod3.ornl.gov
fsnutown.phy.ornl.gov
its2010.ornl.gov
Recruiting-eq2.ornl.gov
LYNCPOOL01.ORNL.GOV
tech-showcase.ornl.gov
sldtransfer.ornl.gov
visitors.ornl.gov
remus.ornl.gov
orca.phy.ornl.gov
5664512065667072-fe2.pantheonsite.io
savitar.ornl.gov
cades.ornl.gov
www.isotopes.gov
5721718521856000-fe2.pantheonsite.io
its2010.ornl.gov
infoviz.ornl.gov
tokens.ornl.gov
sapsys-qas.ornl.gov
cyber-wb.ornl.gov
fusion-neutronics.ornl.gov
5664512065667072-fe2.pantheonsite.io
5664512065667072-fe2.pantheonsite.io
geoai.ornl.gov
cem.ornl.gov
thredds.daac.ornl.gov
devintidp.ornl.gov
5721718521856000-fe2.pantheonsite.io
devaprsweb01.ornl.gov
ftp.ornl.gov
inspirebridge.ornl.gov
web.ornl.gov
api.granite.ccs.ornl.gov
smcdatachallenge.ornl.gov
home.rrd.ornl.gov
itsassets.ornl.gov
trac.ornl.gov
cdiacservices.ornl.gov
www.isotopes.gov
itsassets.ornl.gov
saponbase.ornl.gov
itsdeployment.ornl.gov
bptechday.ornl.gov
lp-cfhub01.ornl.gov
isotopes.phy.ornl.gov
g2mobiletest.ornl.gov
udi.ornl.gov
fegtest.ornl.gov
itsassets.ornl.gov
latex-test-new.ornl.gov
cem.ornl.gov
swc.ornl.gov
ornlaccess.ornl.gov
ornl.gov
LYNCACCESS.ORNL.GOV
g2photosstg.ornl.gov
savitar.ornl.gov
vera.ornl.gov
thredds.daac.ornl.gov
www.olcf.ornl.gov
asc2019.ornl.gov
ready.ornl.gov
sos23.ornl.gov
LYNCPOOL01.ORNL.GOV
innovationcrossroads.ornl.gov
geoai.ornl.gov
bboxaccess.ornl.gov
5631383682678784-fe4.pantheonsite.io
na21dev2.ornl.gov
armftp.ornl.gov
5736126123868160-fe4.pantheonsite.io
web.ornl.gov
pdt.ornl.gov
prod-web4.adc.arm.gov
5713320610889728-fe3.pantheonsite.io
itsdpro.ornl.gov
healthdata.ornl.gov
web.ornl.gov
RSC.ornl.gov
faf.ornl.gov
docs.excl.ornl.gov
apps.ornl.gov
dtrack2013.ornl.gov
pdt.ornl.gov
internal.webmap.ornl.gov
radware.phy.ornl.gov
www.arm.gov
jenkins.ccs.ornl.gov
ccms-cdash.ornl.gov
cades.ornl.gov
Recruiting-tst-internal.ornl.gov
armweb0-stgcms.ornl.gov
5098030885765120-fe4.pantheonsite.io
5098030885765120-fe4.pantheonsite.io
radware.phy.ornl.gov
itsdpro.ornl.gov
ornlsurv02.ornl.gov
radware.phy.ornl.gov
eber.ed.ornl.gov
vpnprod3.ornl.gov
fsnutown.phy.ornl.gov
its2010.ornl.gov
Recruiting-eq2.ornl.gov
LYNCPOOL01.ORNL.GOV
tech-showcase.ornl.gov
sldtransfer.ornl.gov
visitors.ornl.gov
remus.ornl.gov
orca.phy.ornl.gov
5664512065667072-fe2.pantheonsite.io
savitar.ornl.gov
cades.ornl.gov
www.isotopes.gov
5721718521856000-fe2.pantheonsite.io
its2010.ornl.gov
infoviz.ornl.gov
tokens.ornl.gov
sapsys-qas.ornl.gov
cyber-wb.ornl.gov
fusion-neutronics.ornl.gov
5664512065667072-fe2.pantheonsite.io
5664512065667072-fe2.pantheonsite.io
geoai.ornl.gov
cem.ornl.gov
thredds.daac.ornl.gov
devintidp.ornl.gov
5721718521856000-fe2.pantheonsite.io
devaprsweb01.ornl.gov
ftp.ornl.gov
inspirebridge.ornl.gov
web.ornl.gov
api.granite.ccs.ornl.gov
smcdatachallenge.ornl.gov
home.rrd.ornl.gov
itsassets.ornl.gov
trac.ornl.gov
cdiacservices.ornl.gov
www.isotopes.gov
itsassets.ornl.gov
saponbase.ornl.gov
itsdeployment.ornl.gov
bptechday.ornl.gov
lp-cfhub01.ornl.gov
isotopes.phy.ornl.gov
g2mobiletest.ornl.gov
udi.ornl.gov
fegtest.ornl.gov
itsassets.ornl.gov
latex-test-new.ornl.gov
cem.ornl.gov
swc.ornl.gov
ornlaccess.ornl.gov
ornl.gov
LYNCACCESS.ORNL.GOV
g2photosstg.ornl.gov
savitar.ornl.gov
vera.ornl.gov
thredds.daac.ornl.gov
www.olcf.ornl.gov
asc2019.ornl.gov
ready.ornl.gov
sos23.ornl.gov
LYNCPOOL01.ORNL.GOV
innovationcrossroads.ornl.gov
geoai.ornl.gov
bboxaccess.ornl.gov
5631383682678784-fe4.pantheonsite.io
na21dev2.ornl.gov
armftp.ornl.gov
5736126123868160-fe4.pantheonsite.io
web.ornl.gov
pdt.ornl.gov
prod-web4.adc.arm.gov
5713320610889728-fe3.pantheonsite.io
itsdpro.ornl.gov
healthdata.ornl.gov
web.ornl.gov
RSC.ornl.gov
faf.ornl.gov
docs.excl.ornl.gov
apps.ornl.gov
dtrack2013.ornl.gov
pdt.ornl.gov
Certificate
The complete raw certificate details for lp-cfhub01.ornl.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbDCCBNSgAwIBAgIQBhJ99CG8mlu2GzfOwViKKDANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSW50ZXJuZXQyMSEwHwYDVQQDExhJbkNv bW1vbiBSU0EgU2VydmVyIENBIDIwHhcNMjMxMjA2MDAwMDAwWhcNMjUwMTA1MjM1 OTU5WjBnMQswCQYDVQQGEwJVUzESMBAGA1UECBMJVGVubmVzc2VlMSYwJAYDVQQK Ex1PYWsgUmlkZ2UgTmF0aW9uYWwgTGFib3JhdG9yeTEcMBoGA1UEAxMTbHAtY2Zo dWIwMS5vcm5sLmdvdjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALY8 8G8ELFF2cNSfEYmpgP4YqfhrV//YeuL0e4hOmrACO9oJ0laiGLZLMJDNl0/56KLt Z+uuAVdmnc2ovuSUiK1TzyZgcBdGbpHwg+EPWL7vTgr3lmph4CcCxslhb83DwDY5 BgWPlW/41Vfxx8/B86z3Jykukq86+Vyao+hjEiBoKwqcvTSq/IQHW4NL+lu9VnY/ XHWSWETisFpubbwehLoBIPpYMdiojNz7TTIyOeoJaVvCtpEprZ/fEfbh9qooK3zJ k+HGqCrss/9ITDVB6ZOu6vWt5re5YiEBBBB2fSELUyf5UWdAMyNrFd4GWM/0UPRG 6zrLXoQK+/O8xmNexyWs5XI7C2ckbtWIOJeCGiGs/UYc9M6VqZIaNx1h1fQjL/I9 pr3SFaU6D7ANnA/OcDfLcZjSSV60cfrzBn2vfE54Bx1SAEjR2W6BKy2j7NcBmE2b 8Q+J5RTTKR1QRPx66/2y8e7aGwVzAHFNNnoJ2hJSMNUjG5stGNzcCFTgYcU/ucYk vF+LnrAXRa4WKOotbtWZHNhz7mOgpvhWor15C4co70mQvCVBp84Ai7r31M3Jwnoy YDxK5RpkSnd/54wS/QUA3R582RUKigKCBMZ5m9uQ0cUo/0i3/1OqQLuJFafucsbH gnu+jCEI1d2gnIs8Pg2cVN2MtCt0LJ8khSLd5ccLAgMBAAGjggG1MIIBsTAfBgNV HSMEGDAWgBTvTACSpvt2Ll6V4slfhxsZ1U3i2TAdBgNVHQ4EFgQUdeSi3Y0noNJm ETtLgZKIEIt+7h8wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQEC AmcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EM AQICMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9jcmwuc2VjdGlnby5jb20vSW5D b21tb25SU0FTZXJ2ZXJDQTIuY3JsMHAGCCsGAQUFBwEBBGQwYjA7BggrBgEFBQcw AoYvaHR0cDovL2NydC5zZWN0aWdvLmNvbS9JbkNvbW1vblJTQVNlcnZlckNBMi5j cnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMB4GA1UdEQQX MBWCE2xwLWNmaHViMDEub3JubC5nb3YwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQEMBQADggGBAHbMM9wa6jhfrbMXeOo2QUntYSIcedmtTr+ngeJvzNUr twIOqFEe1s2Kqi1G2Ne32HWfzBNosO7wWKTVMEXwYx35wcDzGSQITI4M8YL4PYfq DBi5TJHXVQRAsGPEWKczjAbkGAOfrXGXNeDnvNV0V+D94MCzNQLX6CRdOkTYemkO vTWeKP41smAWMankfhAECsGMoRKxBxpTheAdDffmvz+kBN6c57M1F0gd/dDMSgOR vPLSIk2AiIhbRzjs4kPxrvcHMYI0ch4EPgbEE8T1RMhzD4C+WdvjJNXv1BdThq3k 7tZzpw3chucEgPaCrc/cyt1J8liQ3kB/PQBPcu7aVJuj/no2uTkSp1w/Ir2/8tBN R7lDvVRDPIdENuu2QbPAwtolfIaaABStJgXY6Ezm4XZEmq+w0xMNXNQcFdiHx7Ua C5AYQGLELu69PlIxLW9wu13fSdzednwcztyuTWqyK1OGFgOu+I6XBKKQSIZxn5Mc RPl5FeKdgTBObMeWZXbNpA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtjzwbwQsUXZw1J8RiamA /hip+GtX/9h64vR7iE6asAI72gnSVqIYtkswkM2XT/noou1n664BV2adzai+5JSI rVPPJmBwF0ZukfCD4Q9Yvu9OCveWamHgJwLGyWFvzcPANjkGBY+Vb/jVV/HHz8Hz rPcnKS6Srzr5XJqj6GMSIGgrCpy9NKr8hAdbg0v6W71Wdj9cdZJYROKwWm5tvB6E ugEg+lgx2KiM3PtNMjI56glpW8K2kSmtn98R9uH2qigrfMmT4caoKuyz/0hMNUHp k67q9a3mt7liIQEEEHZ9IQtTJ/lRZ0AzI2sV3gZYz/RQ9EbrOstehAr787zGY17H JazlcjsLZyRu1Yg4l4IaIaz9Rhz0zpWpkho3HWHV9CMv8j2mvdIVpToPsA2cD85w N8txmNJJXrRx+vMGfa98TngHHVIASNHZboErLaPs1wGYTZvxD4nlFNMpHVBE/Hrr /bLx7tobBXMAcU02egnaElIw1SMbmy0Y3NwIVOBhxT+5xiS8X4uesBdFrhYo6i1u 1Zkc2HPuY6Cm+FaivXkLhyjvSZC8JUGnzgCLuvfUzcnCejJgPErlGmRKd3/njBL9 BQDdHnzZFQqKAoIExnmb25DRxSj/SLf/U6pAu4kVp+5yxseCe76MIQjV3aCcizw+ DZxU3Yy0K3QsnySFIt3lxwsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8071383961476244388443911012857973288 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oak Ridge National Laboratory' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lp-cfhub01.ornl.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743466354056254029462900963845119744423709173770471770967845720421096702745425816397976666026993947894644935049206304946382013898204082003946916735641827538745001205100234074373327654828165220025828831878293835091823169046574617789817825414233023985097052559703411591838277643832552638842506110382656243797316813335853244244950024968099564570002659955499335931455241970210124337579121153284700501809230207427545838207512602139772083551004652871538875864607057036426369694912067353514855367745834585170670671467297509298532401425293312127086866039580626712886529017067830996619642012868470926940094874873423181934165428963609313286910962219760171564646297552692883012709020985146829012277206376690271729236627582556995932762282426725807910438332204615898652164868700477963321914821751045796569261356487462031702516473386279586563298087628002213516150573047894529295904031674172047544315735419886684363337296749519485371954282498502087980473829572920680129306721529097698752245946076309963074885083852577228743115029847591424358090525100559366703769881197870183443755163449680446025524876546035218069931601567601369402352677704483956283048356087497981688193236255313988588766106702502402963924860856107393690905042299484974058142287627 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 75e4a2dd8d27a0d266113b4b819288108b7eee1f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-cfhub01.ornl.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (3072 bits) 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