*.its.sfu.ca
- Simon Fraser University -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0d:6e:63:84:d8:b4:92:0b:b0:09:c3:35:56:8b:fe:13 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Simon Fraser University
Organization:
Simon Fraser University
Organization unit: IT Services
Organization unit: IT Services
State / Province:
British Columbia
Locality: Burnaby
Country: CA
Locality: Burnaby
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:6e:63:84:d8:b4:92:0b:b0:09:c3:35:56:8b:fe:13Serial Number (int): 17853135083378009235199115839861947923
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 78:69:38:36:39:37:9b:bb:3a:f7:29:f4:d7:2d:2f:6a:62:ea:1c:bd
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 3a:74:38:43:15:fb:da:62:d0:5a:a3:1f:10:ca:0d:76:c4:3c:de:05
Fingerprint (sha256): 03:b4:ce:70:c8:65:df:92:28:39:d4:2e:af:bc:3d:33:2f:8f:75:11:e6:93:55:af:fa:83:5b:e8:8b:77:79:c0
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
Check the revocation status for certificate *.its.sfu.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.its.sfu.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.its.sfu.ca
its.sfu.ca
its.sfu.ca
Other certificates including the domain name sfu.ca
(limited to 100 certificates)
*.sfu.ca
*.bus.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
lib-theses.lib.sfu.ca
aldine.lib.sfu.ca
lib-theses.lib.sfu.ca
journals.sfu.ca
idp.sfu.ca
research.wiki.iat.sfu.ca
*.sfu.ca
bfraser-srv01.cmpt.sfu.ca
cmpt165.csil.sfu.ca
*.sfu.ca
athletics.sfu.ca
digital.lib.sfu.ca
git.fits.sfu.ca
globeproject.com
gruvi.cs.sfu.ca
databases.lib.sfu.ca
badas.irmacs.sfu.ca
ibcwg.org
*.its.sfu.ca
docs.pkp.sfu.ca
piwik.lib.sfu.ca
journal.archpress.lib.sfu.ca
*.sfu.ca
community.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
*.sfu.ca
ceramicca.ensc.sfu.ca
adler.psyc.sfu.ca
appointment.lib.sfu.ca
athletics.sfu.ca
cas.sfu.ca
*.sfu.ca
www.npatlas.org
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
mikkeo-git-test.bus.sfu.ca
www.lib.sfu.ca
banyanlab.cs.sfu.ca
autonomy.cs.sfu.ca
newmediabusinessblog.org
*.fhs.sfu.ca
lib-search-dev.lib.sfu.ca
olc-dev.its.sfu.ca
calculator.lib.sfu.ca
atom.archives.sfu.ca
static.lib.sfu.ca
*.its.sfu.ca
isea2015.org
ocs.lib.sfu.ca
*.fhs.sfu.ca
vpstest18.lib.sfu.ca
cs-dm-signage.dc.sfu.ca
*.its.sfu.ca
lib-staff.lib.sfu.ca
pathogenomics.sfu.ca
registry.cloud.rcg.sfu.ca
appointment.lib.sfu.ca
bookings.science.sfu.ca
*.its.sfu.ca
npatlas-curate.chem.sfu.ca
api.lib.sfu.ca
*.sfu.ca
mwhs.avalanche.rem.sfu.ca
*.polylab.sfu.ca
cmpt373-lockdown.cs.surrey.sfu.ca
canvas2.tlc.sfu.ca
*.fhs.sfu.ca
digital.lib.sfu.ca
facts.arts.sfu.ca
nsl.cs.sfu.ca
journals.lib.sfu.ca
*.proxy.lib.sfu.ca
*.its.sfu.ca
vpstest23.lib.sfu.ca
advance.science.sfu.ca
conference.pkp.sfu.ca
www.cieedac.sfu.ca
alerts.library.nyu.edu
arago.cprost.sfu.ca
give.sfu.ca
*.lib.sfu.ca
*.ezproxy2.lib.sfu.ca
*.its.sfu.ca
*.fhs.sfu.ca
www.psyc.sfu.ca
rcg-ggt-dash.dcr.sfu.ca
hadar.tlc.sfu.ca
*.sfu.ca
www.psyc.sfu.ca
*.polylab.sfu.ca
my.sfu.ca
banyanlab.cs.sfu.ca
remsurvey.rem.sfu.ca
*.bus.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
lib-theses.lib.sfu.ca
aldine.lib.sfu.ca
lib-theses.lib.sfu.ca
journals.sfu.ca
idp.sfu.ca
research.wiki.iat.sfu.ca
*.sfu.ca
bfraser-srv01.cmpt.sfu.ca
cmpt165.csil.sfu.ca
*.sfu.ca
athletics.sfu.ca
digital.lib.sfu.ca
git.fits.sfu.ca
globeproject.com
gruvi.cs.sfu.ca
databases.lib.sfu.ca
badas.irmacs.sfu.ca
ibcwg.org
*.its.sfu.ca
docs.pkp.sfu.ca
piwik.lib.sfu.ca
journal.archpress.lib.sfu.ca
*.sfu.ca
community.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
*.sfu.ca
ceramicca.ensc.sfu.ca
adler.psyc.sfu.ca
appointment.lib.sfu.ca
athletics.sfu.ca
cas.sfu.ca
*.sfu.ca
www.npatlas.org
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
mikkeo-git-test.bus.sfu.ca
www.lib.sfu.ca
banyanlab.cs.sfu.ca
autonomy.cs.sfu.ca
newmediabusinessblog.org
*.fhs.sfu.ca
lib-search-dev.lib.sfu.ca
olc-dev.its.sfu.ca
calculator.lib.sfu.ca
atom.archives.sfu.ca
static.lib.sfu.ca
*.its.sfu.ca
isea2015.org
ocs.lib.sfu.ca
*.fhs.sfu.ca
vpstest18.lib.sfu.ca
cs-dm-signage.dc.sfu.ca
*.its.sfu.ca
lib-staff.lib.sfu.ca
pathogenomics.sfu.ca
registry.cloud.rcg.sfu.ca
appointment.lib.sfu.ca
bookings.science.sfu.ca
*.its.sfu.ca
npatlas-curate.chem.sfu.ca
api.lib.sfu.ca
*.sfu.ca
mwhs.avalanche.rem.sfu.ca
*.polylab.sfu.ca
cmpt373-lockdown.cs.surrey.sfu.ca
canvas2.tlc.sfu.ca
*.fhs.sfu.ca
digital.lib.sfu.ca
facts.arts.sfu.ca
nsl.cs.sfu.ca
journals.lib.sfu.ca
*.proxy.lib.sfu.ca
*.its.sfu.ca
vpstest23.lib.sfu.ca
advance.science.sfu.ca
conference.pkp.sfu.ca
www.cieedac.sfu.ca
alerts.library.nyu.edu
arago.cprost.sfu.ca
give.sfu.ca
*.lib.sfu.ca
*.ezproxy2.lib.sfu.ca
*.its.sfu.ca
*.fhs.sfu.ca
www.psyc.sfu.ca
rcg-ggt-dash.dcr.sfu.ca
hadar.tlc.sfu.ca
*.sfu.ca
www.psyc.sfu.ca
*.polylab.sfu.ca
my.sfu.ca
banyanlab.cs.sfu.ca
remsurvey.rem.sfu.ca
Certificate
The complete raw certificate details for *.its.sfu.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIQDW5jhNi0kguwCcM1Vov+EzANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTAzMzEwMDAwMDBa Fw0yMTEwMDIyMzU5NTlaMIGJMQswCQYDVQQGEwJDQTEZMBcGA1UECBMQQnJpdGlz aCBDb2x1bWJpYTEQMA4GA1UEBxMHQnVybmFieTEgMB4GA1UEChMXU2ltb24gRnJh c2VyIFVuaXZlcnNpdHkxFDASBgNVBAsTC0lUIFNlcnZpY2VzMRUwEwYDVQQDDAwq Lml0cy5zZnUuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1crX 1joF92BC1kI8LJudnPd72lb5DamLsDmQCWLLARnQeBB81hoz1R8t+m4KtSR81zRP 7HSLRJBSemEuCAvyTx0fj5N8HCmNbkeqQmEXqauw2UMQqqpubnnFXRuMT8QGykRs 9ayAJhFS+UalN58NEFzLbo+UIZyyZcp8DzVSi/teLkYkSRVjFcFXcfHcOkrNKYi+ 2FbTETivS1pA2pVwQNLO4unWdwx95drMA2mwCDnUyOJohkNvQNCvDcSP/XVbmc1w sfi8jeCiY67J5hJgqO7BcfKUK+3jRSbzLvJ9Z/0rGtf+54YZuMFEDcvjkml3Rpv3 4rBv/OyobNeWNLmxAgMBAAGjggL8MIIC+DAfBgNVHSMEGDAWgBS3a6LqqKqEjHnq tNoPmLLFlXa59DAdBgNVHQ4EFgQUeGk4Njk3m7s69yn01y0vamLqHL0wIwYDVR0R BBwwGoIMKi5pdHMuc2Z1LmNhggppdHMuc2Z1LmNhMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgYsGA1UdHwSBgzCBgDA+oDyg OoY4aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2 MjAyMENBMS5jcmwwPqA8oDqGOGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydFRMU1JTQVNIQTI1NjIwMjBDQTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIC MCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB9Bggr BgEFBQcBAQRxMG8wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv bTBHBggrBgEFBQcwAoY7aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD ZXJ0VExTUlNBU0hBMjU2MjAyMENBMS5jcnQwDAYDVR0TAQH/BAIwADCCAQUGCisG AQQB1nkCBAIEgfYEgfMA8QB2AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqXaJl+ IvDXAAABeIWWbccAAAQDAEcwRQIhAN1CrSY21s4FdlV45yLe6U37WQyMp3Fc5FY8 ymCY2HQhAiARypFFpL8Ulyz3h2+uW90gdvrm1doXR9+AllZfi3qheAB3AFzcQ5L+ 5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABeIWWbdwAAAQDAEgwRgIhANqz hoZtQIXU5osmM5+qmBJHvz2yM8YSf3mFQdQXRVAWAiEAtCsTsTRrj1FzDSICyYq5 w9xYO4AHpq2tZRAxh/1vWq8wDQYJKoZIhvcNAQELBQADggEBAHw7hgrVKPSo3hu9 GNpFT0SOI7C2Jjf/xBjmZi1Z2RbBiYwMWtAg7z8RXhXOnDpBhnU2xu1t+gBO9QdD N/QAh6oGtagqTQCHvk6dZr0YYDVe+R07ph2aSpCI/YziAlMTbP4EzLVCkqOsf5Kc jJ73yemqQk+i7KotWfbs+XlHz2em7+SB5KCQYgDSIgLhYtXu67bGUE6Jpe8AMnLp cWQQLh/lb06JuqKAyIoMal4Cn1nLeFPIUAjjjCD67NmNoJdTd9LSdb7PW+J7kfAF 4utgq+MXPKZx42r+ua7vMbAeSCLnPnGiE4hgYG7qOjo9CE8KCtJq0KN74X7gnhy+ zopnEFc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNXK19Y6BfdgQtZCPCyb nZz3e9pW+Q2pi7A5kAliywEZ0HgQfNYaM9UfLfpuCrUkfNc0T+x0i0SQUnphLggL 8k8dH4+TfBwpjW5HqkJhF6mrsNlDEKqqbm55xV0bjE/EBspEbPWsgCYRUvlGpTef DRBcy26PlCGcsmXKfA81Uov7Xi5GJEkVYxXBV3Hx3DpKzSmIvthW0xE4r0taQNqV cEDSzuLp1ncMfeXazANpsAg51MjiaIZDb0DQrw3Ej/11W5nNcLH4vI3gomOuyeYS YKjuwXHylCvt40Um8y7yfWf9KxrX/ueGGbjBRA3L45Jpd0ab9+Kwb/zsqGzXljS5 sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17853135083378009235199115839861947923 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burnaby' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Simon Fraser University' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.its.sfu.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24848132713287317836843582854455750939126658823473997913435459850532015147510502830429422715191715268261782966616918068110135776669084125580633288243057931241852913995863348167423922974495730505119637261649434209078732140426833558785581709498905238751975863473091675416149060966114834764376265151611538831788307820670766928660350262005328084700464425456170007260296280421234182974790747426260334545002575571194274775210496722196469566202627219379575500977781091559639081778359765073250774138067925129751754642356833434453547176177555860579245680597780725327820342194751629101090303924495776629565301579689407422970289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7869383639379bbb3af729f4d72d2f6a62ea1cbd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.its.sfu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its.sfu.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017885966dc70000040300473045022100dd42ad2636d6ce05765578e722dee94dfb590c8ca7715ce4563cca6098d87421022011ca9145a4bf14972cf7876fae5bdd2076fae6d5da1747df8096565f8b7aa1780077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017885966ddc0000040300483046022100dab386866d4085d4e68b26339faa981247bf3db233c6127f798541d417455016022100b42b13b1346b8f51730d2202c98ab9c3dc583b8007a6adad65103187fd6f5aaf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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