www.libertymutualgroup.com
- Liberty Mutual Group -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 01:65:60:8d:56:15:77:fb:4a:8c:27:62:d9:87:f2:79 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Liberty Mutual Group
Organization:
Liberty Mutual Group
Organization unit: Hosting Services
Organization unit: Hosting Services
State / Province:
New Hampshire
Locality: Portsmouth
Country: US
Locality: Portsmouth
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:65:60:8d:56:15:77:fb:4a:8c:27:62:d9:87:f2:79Serial Number (int): 1855608287631463418981205688285917817
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: ce:05:80:33:6e:b4:63:34:3e:22:1f:be:93:6c:7e:68:5d:b5:17:2e
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): 56:e5:ff:53:7d:68:93:cb:32:87:9f:1b:08:19:e9:78:5d:b7:2b:dd
Fingerprint (sha256): 03:42:a0:36:78:d6:53:bc:ea:0e:76:ae:0e:71:de:20:ad:c9:47:2f:84:13:a3:ff:97:ab:2d:af:38:7b:c6:be
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate www.libertymutualgroup.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.libertymutualgroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kdc-www.libertymutualgroup.com
pdc-www.libertymutualgroup.com
www.libertymutualgroup.com
pdc-www.libertymutualgroup.com
www.libertymutualgroup.com
Other certificates including the domain name libertymutualgroup.com
(limited to 100 certificates)
PeopleAtLiberty.com
wcvideo.libertymutualgroup.com
test-securefile.libertymutual.com
stage-stui.libertymutualgroup.com
libertymutual.myinstantincentives.com
cicct-taskrouter-gateway.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
test-equote.libertymutual.com
vantageporttest.libertymutual.com
kdc-secure.business.libertymutualgroup.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
perf.libertymutualgroup.com
www.libertymutualgroup.com
test-icasemanagersecure.libertymutual.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
stage-stui.libertymutualgroup.com
whalebot.libertymutual.com
dev.lmemergencyportal.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
tst-business.libertymutualgroup.com
whalebot.libertymutual.com
perf-www.libertymutualvantageport.com
PeopleAtLiberty.com
stui.libertymutualgroup.com
techcampus.libertymutual.com
securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
ni-newsbrief.libertymutualgroup.com
tst.libertymutualgroup.com
www.careers-test.libertymutualgroup.com
libertymutual.myinstantincentives.com
www.business.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
af.libertymutualgroup.com
stage-af.libertymutualgroup.com
techcampus.libertymutual.com
test-claimseft.libertymutualgroup.com
securefile.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
perf-tuition.libertymutual.com
test-securefile.libertymutual.com
whalebot.libertymutual.com
steps.libertymutualgroup.com
securefile.libertymutual.com
wcvideo.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
business.libertymutualgroup.com
business.libertymutualgroup.com
tst-wcvideo.libertymutualgroup.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
techcampus.libertymutual.com
test-icasemanagersecure.libertymutual.com
libertymutual.myinstantincentives.com
techcampus.libertymutual.com
af.libertymutual.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
perf-www.libertymutualvantageport.com
cicct-taskrouter-gateway.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
perf-www.libertymutualvantageport.com
www.careers-test.libertymutualgroup.com
test-securefile.libertymutual.com
PeopleAtLiberty.com
www.careers-test.libertymutualgroup.com
techcampus.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
cicct-taskrouter-gateway.libertymutual.com
securefile.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
test-securefile.libertymutual.com
www.libertymutualgroup.com
techcampus.libertymutual.com
wcvideo.libertymutualgroup.com
test-securefile.libertymutual.com
stage-stui.libertymutualgroup.com
libertymutual.myinstantincentives.com
cicct-taskrouter-gateway.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
test-equote.libertymutual.com
vantageporttest.libertymutual.com
kdc-secure.business.libertymutualgroup.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
perf.libertymutualgroup.com
www.libertymutualgroup.com
test-icasemanagersecure.libertymutual.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
stage-stui.libertymutualgroup.com
whalebot.libertymutual.com
dev.lmemergencyportal.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
tst-business.libertymutualgroup.com
whalebot.libertymutual.com
perf-www.libertymutualvantageport.com
PeopleAtLiberty.com
stui.libertymutualgroup.com
techcampus.libertymutual.com
securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
ni-newsbrief.libertymutualgroup.com
tst.libertymutualgroup.com
www.careers-test.libertymutualgroup.com
libertymutual.myinstantincentives.com
www.business.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
af.libertymutualgroup.com
stage-af.libertymutualgroup.com
techcampus.libertymutual.com
test-claimseft.libertymutualgroup.com
securefile.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
perf-tuition.libertymutual.com
test-securefile.libertymutual.com
whalebot.libertymutual.com
steps.libertymutualgroup.com
securefile.libertymutual.com
wcvideo.libertymutualgroup.com
securefile.libertymutual.com
test-securefile.libertymutual.com
vantageporttest.libertymutual.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
business.libertymutualgroup.com
business.libertymutualgroup.com
tst-wcvideo.libertymutualgroup.com
techcampus.libertymutual.com
ete-claims.libertymutual.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
techcampus.libertymutual.com
test-icasemanagersecure.libertymutual.com
libertymutual.myinstantincentives.com
techcampus.libertymutual.com
af.libertymutual.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
perf-www.libertymutualvantageport.com
cicct-taskrouter-gateway.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
perf-www.libertymutualvantageport.com
www.careers-test.libertymutualgroup.com
test-securefile.libertymutual.com
PeopleAtLiberty.com
www.careers-test.libertymutualgroup.com
techcampus.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
PeopleAtLiberty.com
cicct-taskrouter-gateway.libertymutual.com
securefile.libertymutual.com
techcampus.libertymutual.com
libertymutual.myinstantincentives.com
test-securefile.libertymutual.com
techcampus.libertymutual.com
test-securefile.libertymutual.com
www.libertymutualgroup.com
techcampus.libertymutual.com
Certificate
The complete raw certificate details for www.libertymutualgroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIQAWVgjVYVd/tKjCdi2YfyeTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwODMxMDAwMDAwWhcNMjAxMDAxMTIw MDAwWjCBmTELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU5ldyBIYW1wc2hpcmUxEzAR BgNVBAcTClBvcnRzbW91dGgxHTAbBgNVBAoTFExpYmVydHkgTXV0dWFsIEdyb3Vw MRkwFwYDVQQLExBIb3N0aW5nIFNlcnZpY2VzMSMwIQYDVQQDExp3d3cubGliZXJ0 eW11dHVhbGdyb3VwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMFpCl4xgL9bbjrdVxs3Vl40IX8mmHEFE6FtDT3beuUloQ+YljsfAjJDFs3efFu6 +CGQkAkVdWyCsV8mRiVy3T/6Q4poDKM3o4L11mUdI/pDIeMCvJDFhQrjXvj/9SZ0 HlD/IISBrM+mVSkklm8Imohp50lHQLf1EOm1OJ6Dtn1sXkMdAOtPUzEXhfsLLFe6 bsXEl0RwNGF/sDTjjCsubuYPbJaPi9vEgIgjdGi5VfCv13PTdiW38fd00xz7dQOU LQWanP/Lk0/DqiEIREIk/fP0z5TQYQgBKiF9Isuc/rbfRBS+gqpaEc37aSSB7FfF rLrJypU2gEiboY9AVyBL33MCAwEAAaOCAjcwggIzMB8GA1UdIwQYMBaAFCRuKy3Q apJRUSVpAaqaR6aJ50AgMB0GA1UdDgQWBBTOBYAzbrRjND4iH76TbH5oXbUXLjBl BgNVHREEXjBcgh5rZGMtd3d3LmxpYmVydHltdXR1YWxncm91cC5jb22CHnBkYy13 d3cubGliZXJ0eW11dHVhbGdyb3VwLmNvbYIad3d3LmxpYmVydHltdXR1YWxncm91 cC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjB3BgNVHR8EcDBuMDWgM6Axhi9odHRwOi8vY3JsMy5kaWdpY2VydC5jb20v RGlnaUNlcnRHbG9iYWxDQUcyLmNybDA1oDOgMYYvaHR0cDovL2NybDQuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmwwTAYDVR0gBEUwQzA3BglghkgB hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAIBgZngQwBAgIwdAYIKwYBBQUHAQEEaDBmMCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5kaWdpY2VydC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3J0MAkGA1UdEwQCMAAwEwYK KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAMxP3ORq+ck6/L3/ GEAzbW8bfDAipsPIjjcV3Ev0CqlfE5R41W5AU4LtzFzrhPaA21mUiSKwOIIv8DAh 4DKXqmc/Hdf9cV6KWa4kStZJuGmKowGB96jFWwKHjajRB1cjJQ5fzMSJjryQr5GK esvPc06MJjeQS9YePfU9Jh6lY7Epn7ZIzvNIxa+iXnwAJZnQ6EulAz5PT1PHzOn9 ctA6Yfm66SIHoHErjeRiavMx0rVhe6uNlpiBK8TGhQrwbHJrvVCjdS5qgmIzs3ms /bE1YcyPBLJHZ7ay1EoAm2y+nZ87E5fn24GyjafjyS/bQ8o2vSYuxJu8DcPjoqRe Jwsr59g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWkKXjGAv1tuOt1XGzdW XjQhfyaYcQUToW0NPdt65SWhD5iWOx8CMkMWzd58W7r4IZCQCRV1bIKxXyZGJXLd P/pDimgMozejgvXWZR0j+kMh4wK8kMWFCuNe+P/1JnQeUP8ghIGsz6ZVKSSWbwia iGnnSUdAt/UQ6bU4noO2fWxeQx0A609TMReF+wssV7puxcSXRHA0YX+wNOOMKy5u 5g9slo+L28SAiCN0aLlV8K/Xc9N2Jbfx93TTHPt1A5QtBZqc/8uTT8OqIQhEQiT9 8/TPlNBhCAEqIX0iy5z+tt9EFL6CqloRzftpJIHsV8WsusnKlTaASJuhj0BXIEvf cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1855608287631463418981205688285917817 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertymutualgroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24415790259404813472124205988239321471114423887564258280435987063475073378462343937428450837957677255860840769967478824698867241294721229050565291786884169015888413289909936217432808739931626461489982975937747698324263942858820397579279008052924963487265586865226877200216806467795973552372670808480732734637681233802014337936261536517324209900994022578938348039964741441861988460772989725234909289552892780779896184604736930327287525457613929023907386022724961745321702263794175897848618369491347664687942481656739306133905250148075469178882348012201440436626059161944933337114747333176095149979319251150585063006067 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ce0580336eb463343e221fbe936c7e685db5172e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdc-www.libertymutualgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdc-www.libertymutualgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualgroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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