avonu-qaf.youravon.com
- Avon Products Inc -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 04:83:dc:fb:89:da:ba:0f:d9:3e:8b:d2:a5:4c:ec:d5 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Avon Products Inc
Organization:
Avon Products Inc
Organization unit: Global IT
Organization unit: Global IT
State / Province:
New York
Locality: Rye
Country: US
Locality: Rye
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:83:dc:fb:89:da:ba:0f:d9:3e:8b:d2:a5:4c:ec:d5Serial Number (int): 6001584930653191185516069161716739285
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 0d:4d:71:33:7b:0a:26:8c:ce:21:b6:89:1a:9a:0d:06:48:e3:e2:45
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): ce:2f:b6:25:bc:0b:7b:44:31:a3:9f:76:0b:fb:b8:b4:e5:30:94:7e
Fingerprint (sha256): 03:c0:a2:7c:0e:75:88:3c:5f:10:32:a9:5b:aa:3f:83:30:3f:ad:22:21:04:63:74:cd:50:c7:e3:8f:a6:30:82
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate avonu-qaf.youravon.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for avonu-qaf.youravon.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
avonu-qaf.youravon.com
Other certificates including the domain name youravon.com
(limited to 100 certificates)
ecom.youravon.com
ecom2.youravon.com
ecom.youravon.com
social.youravon.com
avonu-qaf.youravon.com
smetrix.youravon.com
static1.br.avon.com
go.youravon.com
smetrix.youravon.com
ecom2.youravon.com
smetrix.youravon.com
catalog.avonnow.com
www.avon.com
catalog.avonnow.com
go-qaf.youravon.com
prp.youravon.com
*.youravon.com
go.youravon.com
sweeps.youravon.com
avonu.youravon.com
*.youravon.com
www.avon.com
sweeps.youravon.com
ecom.youravon.com
static1.br.avon.com
ecom.youravon.com
prowessapp.youravon.com
sweeps.youravon.com
sweeps.youravon.com
sweeps.youravon.com
ecom.youravon.com
social.youravon.com
static1.br.avon.com
static1.br.avon.com
ecom.youravon.com
*.youravon.com
ecom.youravon.com
*.youravon.com
smetrix.youravon.com
sweeps.youravon.com
avonu-qaf.youravon.com
sweeps.youravon.com
social.youravon.com
static1.br.avon.com
www.avon.com
avonu.youravon.com
smetrix.youravon.com
social.youravon.com
*.youravon.com
*.youravon.com
smetrix.youravon.com
static1.br.avon.com
ecom2.youravon.com
social-qaf.youravon.com
*.qa.youravon.com
static1.br.avon.com
sweeps.youravon.com
www.youravon.com
www.avon.com
sweeps-qaf.youravon.com
smetrix.youravon.com
ezreturns.youravon.com
static1.br.avon.com
catalog.avonnow.com
static1.br.avon.com
sweeps.youravon.com
smetrix.youravon.com
ecom.youravon.com
sweeps.youravon.com
static1.br.avon.com
static1.br.avon.com
ecom.youravon.com
static1.br.avon.com
static1.br.avon.com
smetrix.youravon.com
ecom.youravon.com
avonu.youravon.com
www.avon.com
ecom2.youravon.com
go.youravon.com
agws-sec.avon.com
static1.br.avon.com
agws-sec.avon.com
www.avon.com
ecom.youravon.com
*.youravon.com
smetrix.youravon.com
static1.br.avon.com
sweeps.youravon.com
catalog.avonnow.com
avonu.youravon.com
prod-ecom-aws.avonnow.com
social.youravon.com
smetrix.youravon.com
agws-sec.avon.com
catalog.avonnow.com
ecom2.youravon.com
ecom.youravon.com
static1.br.avon.com
www.avon.com
ecom2.youravon.com
ecom.youravon.com
social.youravon.com
avonu-qaf.youravon.com
smetrix.youravon.com
static1.br.avon.com
go.youravon.com
smetrix.youravon.com
ecom2.youravon.com
smetrix.youravon.com
catalog.avonnow.com
www.avon.com
catalog.avonnow.com
go-qaf.youravon.com
prp.youravon.com
*.youravon.com
go.youravon.com
sweeps.youravon.com
avonu.youravon.com
*.youravon.com
www.avon.com
sweeps.youravon.com
ecom.youravon.com
static1.br.avon.com
ecom.youravon.com
prowessapp.youravon.com
sweeps.youravon.com
sweeps.youravon.com
sweeps.youravon.com
ecom.youravon.com
social.youravon.com
static1.br.avon.com
static1.br.avon.com
ecom.youravon.com
*.youravon.com
ecom.youravon.com
*.youravon.com
smetrix.youravon.com
sweeps.youravon.com
avonu-qaf.youravon.com
sweeps.youravon.com
social.youravon.com
static1.br.avon.com
www.avon.com
avonu.youravon.com
smetrix.youravon.com
social.youravon.com
*.youravon.com
*.youravon.com
smetrix.youravon.com
static1.br.avon.com
ecom2.youravon.com
social-qaf.youravon.com
*.qa.youravon.com
static1.br.avon.com
sweeps.youravon.com
www.youravon.com
www.avon.com
sweeps-qaf.youravon.com
smetrix.youravon.com
ezreturns.youravon.com
static1.br.avon.com
catalog.avonnow.com
static1.br.avon.com
sweeps.youravon.com
smetrix.youravon.com
ecom.youravon.com
sweeps.youravon.com
static1.br.avon.com
static1.br.avon.com
ecom.youravon.com
static1.br.avon.com
static1.br.avon.com
smetrix.youravon.com
ecom.youravon.com
avonu.youravon.com
www.avon.com
ecom2.youravon.com
go.youravon.com
agws-sec.avon.com
static1.br.avon.com
agws-sec.avon.com
www.avon.com
ecom.youravon.com
*.youravon.com
smetrix.youravon.com
static1.br.avon.com
sweeps.youravon.com
catalog.avonnow.com
avonu.youravon.com
prod-ecom-aws.avonnow.com
social.youravon.com
smetrix.youravon.com
agws-sec.avon.com
catalog.avonnow.com
ecom2.youravon.com
ecom.youravon.com
static1.br.avon.com
www.avon.com
Certificate
The complete raw certificate details for avonu-qaf.youravon.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIQBIPc+4naug/ZPovSpUzs1TANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMjA0MDAwMDAwWhcN MjAxMjA0MTIwMDAwWjB/MQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsx DDAKBgNVBAcTA1J5ZTEaMBgGA1UEChMRQXZvbiBQcm9kdWN0cyBJbmMxEjAQBgNV BAsTCUdsb2JhbCBJVDEfMB0GA1UEAxMWYXZvbnUtcWFmLnlvdXJhdm9uLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMl4Uiy68Jl+58syy8xsPzqa FahvT8eH5sfUsodrPFN9I8d3x0qwZXtrg6l5Dl/5GKS2t0jAJp/sbKIQWj6IBzGN e5BKJzNYpqgUUQAced3r/k04FXbp2pucIU17aNDplgBL+864EpoAX3yohAvB+kN6 w/DyphgkQjB4R34akQjSZKf/NhXkxokV0RfJxQe+ADGVGFblwPr/IzPem24SJsBr AgB3VZptiqq05z9PVpkumKatM7OHNZ+NHQtlZ1xXuYD4PtnfZWQ+Ks/8DmCDaSJu ePVlCbdMpsqMpfo9mbwgQxyQDrY4YZWCWIHHZpk/IuZv7Nb9ZbPq43v1qq5LXxkC AwEAAaOCAe8wggHrMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0G A1UdDgQWBBQNTXEzewomjM4htokamg0GSOPiRTAhBgNVHREEGjAYghZhdm9udS1x YWYueW91cmF2b24uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGln aWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRp Z2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9 bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw CAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29j c3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdp Y2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1UdEwQC MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAE8I/chb kOF6px4D3so1Sxs3pjCt5T8cVUl6tazHVtTGhvgYpXk9U79SYmZ9+PuGp+xxpbcp 1ItZxwvFmrBSoGbVXgzTly7W6W3gfkSeaQFx83BtwIZ8QeR+3h9qVqUnbDCqF63S YCfUWo6RxnjsReJugsBoU5SsIEeczDagIo1kCjiVr97ePDuFODNtHSLp+xCU7b27 mVhpWlzs5QOR4at1aCJtWmgMjqATdiaRA29kQJcVBycw9RkKBjO8r5GQYI5Or+Kz c3XDndNK03KCj9m/ynGNe01WSrEU+4av5mrq8pNdPWt7emJo+2xFvOoT3eyN5Ajb zkznE9VWu87vVW0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXhSLLrwmX7nyzLLzGw/ OpoVqG9Px4fmx9Syh2s8U30jx3fHSrBle2uDqXkOX/kYpLa3SMAmn+xsohBaPogH MY17kEonM1imqBRRABx53ev+TTgVdunam5whTXto0OmWAEv7zrgSmgBffKiEC8H6 Q3rD8PKmGCRCMHhHfhqRCNJkp/82FeTGiRXRF8nFB74AMZUYVuXA+v8jM96bbhIm wGsCAHdVmm2KqrTnP09WmS6Ypq0zs4c1n40dC2VnXFe5gPg+2d9lZD4qz/wOYINp Im549WUJt0ymyoyl+j2ZvCBDHJAOtjhhlYJYgcdmmT8i5m/s1v1ls+rje/Wqrktf GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6001584930653191185516069161716739285 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rye' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avon Products Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avonu-qaf.youravon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25433231792179017371740218363336636265957338248913769037355984522415065868643836281037139302588732324718848553865363419724286635394652083685598655829399489529672599350695184219418749032238753402674874684306110055929829420074439129299048344436251523487085404763008597372518552404332392059872562073084949486206496866482882731993037093693148575325484724533818827062321342327760996037925981387356125513112679164699127289365826073371486158066070610165804852628584555114075670033398192328545361067979515933396912979698660649691929246065562962167498975739071265336060240929201292773224967441126092386623638834927628295298841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d4d71337b0a268cce21b6891a9a0d0648e3e245 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonu-qaf.youravon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004f08fdc85b90e17aa71e03deca354b1b37a630ade53f1c55497ab5acc756d4c686f818a5793d53bf5262667df8fb86a7ec71a5b729d48b59c70bc59ab052a066d55e0cd3972ed6e96de07e449e690171f3706dc0867c41e47ede1f6a56a5276c30aa17add26027d45a8e91c678ec45e26e82c0685394ac20479ccc36a0228d640a3895afdede3c3b8538336d1d22e9fb1094edbdbb9958695a5cece50391e1ab7568226d5a680c8ea013762691036f64409715072730f5190a0633bcaf9190608e4eafe2b37375c39dd34ad372828fd9bfca718d7b4d564ab114fb86afe66aeaf2935d3d6b7b7a6268fb6c45bcea13ddec8de408dbce4ce713d556bbceef556d