*.test.giss.trendmicro.com
- Trend Micro Inc. -
Issued by AffirmTrust Certificate Authority - OV1
About this certificate
This digital certificate with serial number 2d:0a:b2:87:e1:50:9b:24:00:00:00:00:58:08:7c:51 was issued on by AffirmTrust.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Trend Micro Inc.
Organization:
Trend Micro Inc.
State / Province:
Texas
Locality: Irving
Country: US
Locality: Irving
Country: US
AffirmTrust
Organization:
AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Organization unit: See www.affirmtrust.com/repository
Country:
CA
This certificate has expire since
Certificate Details
Serial Number (hex): 2d:0a:b2:87:e1:50:9b:24:00:00:00:00:58:08:7c:51Serial Number (int): 59870803813349525886237102662151076945
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 13:1d:14:7c:73:ed:99:8e:c1:31:b2:df:28:cd:a2:5d:de:c1:82:22
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4
Fingerprint (sha1): 71:68:66:80:72:94:de:f5:f3:6d:6d:67:4f:fb:67:f7:48:15:25:62
Fingerprint (sha256): 04:03:8c:61:8f:1d:98:1e:06:ff:39:4b:ff:c5:2b:62:37:ef:2e:db:b4:31:c7:74:8b:42:3a:4a:31:85:27:f8
Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt
Revocation information
OCSP Server: http://ocsp.affirmtrust.comCRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl
Check the revocation status for certificate *.test.giss.trendmicro.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.test.giss.trendmicro.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.test.giss.trendmicro.com
test.giss.trendmicro.com
test.giss.trendmicro.com
Other certificates including the domain name trendmicro.com
(limited to 100 certificates)
sec-adv.trendmicro.com
sls-xdrrxrs131test.dev-us-east-2.parsley.trendmicro.com
*.storage.trendmicro.com
*.trendmicro.com
tmx.trendmicro.com
int.sspm.trendmicro.com
prdu-selectsupportemea.trendmicro.com
vanity3.lithium.com
sam.trendmicro.com
*.trendmicro.com
*.etdl.trendmicro.com
xdr.nacloud.trendmicro.com
filestorage.sg-1.dev-cloudone.trendmicro.com
*.eks.trendmicro.com
file-uk.trendmicro.com
sec-adv-admin.trendmicro.com
twcommercial01.jenkinsci.trendmicro.com
vanity7.jiveon.com
*.p1rd1.sps-endpoint-beta.trendmicro.com
newsletters.trendmicro.com
p225b2.dev-us-east-2.parsley.trendmicro.com
renewonlinestg.trendmicro.com
audit.trend-us-1.cloudone.trendmicro.com
devops-jenkins-pci.luwak.trendmicro.com
doctorlevel.trendmicro.com
www.trendmicro.com
misp.research.trendmicro.com
*.prod-eu-central-1.wfxdr.trendmicro.com
stg.fbbot.tmcc.csoc.trendmicro.com
vault-stg.trendmicro.com
liberalapi-tmp.sdi.trendnet.org
tableau-consumer.trendmicro.com
documents.trendmicro.com
*.trendmicro.com
iotserver-staging.trendmicro.com
newsroom.trendmicro.com
*.iws.trendmicro.com
*.osscan.trendmicro.com
*.alpha.consumervpn.trendmicro.com
tmpn.trendmicro.com
*.auth.trendmicro.com
intsearch.trendmicro.com
vanity4.lithium.com
ocm-it.br.secops.trendmicro.com
*.dc1.beta.storage.trendmicro.com
trendeorders-emea-staging.trendmicro.com
*.giss.trendmicro.com
doctorone.baplsstage.trendmicro.com
*.appletuner.trendmicro.com
cloudresources.jp-1.cloudone.trendmicro.com
dashboard.app-protect.trendmicro.com
*.giss.trendmicro.com
*.login-stg.trendmicro.com
projects.us-1.cloudone.trendmicro.com
tmcc.trendmicro.com
accounts.trend-us-1.dev-cloudone.trendmicro.com
licenseupdate2.trendmicro.com
sdl-int.visionone.trendmicro.com
au-phase.activeupdate.trendmicro.com
sls-xdrrp190b8.dev-us-east-1.parsley.trendmicro.com
premiumservices.trendmicro.com
*.manage.trendmicro.com
cloudaccounts-ui-us.xdr.trendmicro.com
api.securityportal-stg.trendmicro.com
*.beta.consumervpn.trendmicro.com
go2.trendmicro.com
gpt-playground-plugin-jp.trendmicro.com
*.jarvis.trendmicro.com
projects.au-1.dev-cloudone.trendmicro.com
*.consumervpn.trendmicro.com
*.trendmicro.com
conformity.us-1.staging-cloudone.trendmicro.com
sslauto.itdev.trendmicro.com
dispatch01.trendmicro.com
iamservice.trendmicro.com
event-forwarder.ca-1.cloudone.trendmicro.com
siteseal01.trendmicro.com
cloudaccounts.in-1.cloudone.trendmicro.com
*.ml-tool.trendmicro.com
us.imhs-ws.trendmicro.com
*.trendmicro.com
corpit-dispatch.trendmicro.com
deepsecurity.trendmicro.com
artifactscan.us-1.cloudone.trendmicro.com
*.trendmicro.com
*.p1qa2.sps-endpoint-beta.trendmicro.com
*.isday.trendmicro.com
*.devhw.sps-endpoint-beta.trendmicro.com
drilsnr.trendmicro.com
workload.us-1.cloudone.trendmicro.com
jr.trendmicro.com
*.wfbs-svc.trendmicro.com
*.test.giss.trendmicro.com
rule.tip.trendmicro.com
*.giss.trendmicro.com
mcs.trendmicro.com
mktdatamart.trendmicro.com
filestorage.ca-1.cloudone.trendmicro.com
tsm.dev-cloudone.trendmicro.com
*.trendmicro.com
sls-xdrrxrs131test.dev-us-east-2.parsley.trendmicro.com
*.storage.trendmicro.com
*.trendmicro.com
tmx.trendmicro.com
int.sspm.trendmicro.com
prdu-selectsupportemea.trendmicro.com
vanity3.lithium.com
sam.trendmicro.com
*.trendmicro.com
*.etdl.trendmicro.com
xdr.nacloud.trendmicro.com
filestorage.sg-1.dev-cloudone.trendmicro.com
*.eks.trendmicro.com
file-uk.trendmicro.com
sec-adv-admin.trendmicro.com
twcommercial01.jenkinsci.trendmicro.com
vanity7.jiveon.com
*.p1rd1.sps-endpoint-beta.trendmicro.com
newsletters.trendmicro.com
p225b2.dev-us-east-2.parsley.trendmicro.com
renewonlinestg.trendmicro.com
audit.trend-us-1.cloudone.trendmicro.com
devops-jenkins-pci.luwak.trendmicro.com
doctorlevel.trendmicro.com
www.trendmicro.com
misp.research.trendmicro.com
*.prod-eu-central-1.wfxdr.trendmicro.com
stg.fbbot.tmcc.csoc.trendmicro.com
vault-stg.trendmicro.com
liberalapi-tmp.sdi.trendnet.org
tableau-consumer.trendmicro.com
documents.trendmicro.com
*.trendmicro.com
iotserver-staging.trendmicro.com
newsroom.trendmicro.com
*.iws.trendmicro.com
*.osscan.trendmicro.com
*.alpha.consumervpn.trendmicro.com
tmpn.trendmicro.com
*.auth.trendmicro.com
intsearch.trendmicro.com
vanity4.lithium.com
ocm-it.br.secops.trendmicro.com
*.dc1.beta.storage.trendmicro.com
trendeorders-emea-staging.trendmicro.com
*.giss.trendmicro.com
doctorone.baplsstage.trendmicro.com
*.appletuner.trendmicro.com
cloudresources.jp-1.cloudone.trendmicro.com
dashboard.app-protect.trendmicro.com
*.giss.trendmicro.com
*.login-stg.trendmicro.com
projects.us-1.cloudone.trendmicro.com
tmcc.trendmicro.com
accounts.trend-us-1.dev-cloudone.trendmicro.com
licenseupdate2.trendmicro.com
sdl-int.visionone.trendmicro.com
au-phase.activeupdate.trendmicro.com
sls-xdrrp190b8.dev-us-east-1.parsley.trendmicro.com
premiumservices.trendmicro.com
*.manage.trendmicro.com
cloudaccounts-ui-us.xdr.trendmicro.com
api.securityportal-stg.trendmicro.com
*.beta.consumervpn.trendmicro.com
go2.trendmicro.com
gpt-playground-plugin-jp.trendmicro.com
*.jarvis.trendmicro.com
projects.au-1.dev-cloudone.trendmicro.com
*.consumervpn.trendmicro.com
*.trendmicro.com
conformity.us-1.staging-cloudone.trendmicro.com
sslauto.itdev.trendmicro.com
dispatch01.trendmicro.com
iamservice.trendmicro.com
event-forwarder.ca-1.cloudone.trendmicro.com
siteseal01.trendmicro.com
cloudaccounts.in-1.cloudone.trendmicro.com
*.ml-tool.trendmicro.com
us.imhs-ws.trendmicro.com
*.trendmicro.com
corpit-dispatch.trendmicro.com
deepsecurity.trendmicro.com
artifactscan.us-1.cloudone.trendmicro.com
*.trendmicro.com
*.p1qa2.sps-endpoint-beta.trendmicro.com
*.isday.trendmicro.com
*.devhw.sps-endpoint-beta.trendmicro.com
drilsnr.trendmicro.com
workload.us-1.cloudone.trendmicro.com
jr.trendmicro.com
*.wfbs-svc.trendmicro.com
*.test.giss.trendmicro.com
rule.tip.trendmicro.com
*.giss.trendmicro.com
mcs.trendmicro.com
mktdatamart.trendmicro.com
filestorage.ca-1.cloudone.trendmicro.com
tsm.dev-cloudone.trendmicro.com
*.trendmicro.com
Certificate
The complete raw certificate details for *.test.giss.trendmicro.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIQLQqyh+FQmyQAAAAAWAh8UTANBgkqhkiG9w0BAQsFADCB gjELMAkGA1UEBhMCQ0ExFDASBgNVBAoTC0FmZmlybVRydXN0MSswKQYDVQQLEyJT ZWUgd3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MTAwLgYDVQQDEydBZmZp cm1UcnVzdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBPVjEwHhcNMTgwNzIzMDYy NTA5WhcNMjAwNzIzMDY1NTA4WjBuMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4 YXMxDzANBgNVBAcTBklydmluZzEZMBcGA1UEChMQVHJlbmQgTWljcm8gSW5jLjEj MCEGA1UEAwwaKi50ZXN0Lmdpc3MudHJlbmRtaWNyby5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDNwz9ETZFW96ZdEyg04TQyP4y+s+O6NJcCwTUC Eq5fXhj9GCba2cOyugqeFD7JpO9gM6cbE+OTaPHrdZOw0srX1QjsHggVjSA7fQJm vD48YfaO6ES2q4mASDOclbqRphhVPXiR10SqR0qbQNY2eAubPvkV9LvTZt+P+hD3 Oumoka7m2hNNe8idR1Bwni1QgrSofAPHvwCnP7l2VmyuCSwTyC+t/FOksefWBtF5 imUbLg0P2rlPSrH01U/5LcLcysyMIfGlQP+XZ1NR3SVc1kA2B5juKb14XAiGaCL8 P+PAc/V7rxQNtRWfpkIIsuVQD6EIdO2obVxWAqa/vWnlFgBlAgMBAAGjggHZMIIB 1TATBgorBgEEAdZ5AgQDAQH/BAIFADA/BgNVHREEODA2ghoqLnRlc3QuZ2lzcy50 cmVuZG1pY3JvLmNvbYIYdGVzdC5naXNzLnRyZW5kbWljcm8uY29tMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwCQYDVR0TBAIw ADBsBggrBgEFBQcBAQRgMF4wJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLmFmZmly bXRydXN0LmNvbTAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5hZmZpcm10cnVzdC5j b20vYWZ0b3YxY2EuY3J0MFcGA1UdIARQME4wQgYKKwYBBAGCjwkCBTA0MDIGCCsG AQUFBwIBFiZodHRwczovL3d3dy5hZmZpcm10cnVzdC5jb20vcmVwb3NpdG9yeTAI BgZngQwBAgIwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5hZmZpcm10cnVz dC5jb20vY3JsL2FmdG92MWNhLmNybDAfBgNVHSMEGDAWgBT+YMMNpKKdIU96eExi xdsU/Dl4xDAdBgNVHQ4EFgQUEx0UfHPtmY7BMbLfKM2iXd7BgiIwDQYJKoZIhvcN AQELBQADggEBAFUIsyk1YfilFOdgJGZsOS04iJI0ir4w+qcZKIbSsTts7yRz6t5F Zdi77BPOwx9l+H0B6XBl7zJtK2joMjvXy4d0P1opJRr0Q/B1XoIlwZV4acFIHxAB tOs74o9s7p3GmvKHdOB2eMUMpfPFYWdmDcEqh3QMMeW4RpfUbgJ5GxQQLZ/1jnkm yEagvUUwkZni3tNhMeR1IQOulqBzwKKJxqG7PgSZgGk9p1W5A/JX4jQj7Qp1p73S zWUdRkL8Fi2S9YbR3+HLFLWbaj3dCWqjo8rY4IqcbvRJ1Z0nQhmXx4pL5MJsb14o qj4DNfQOT8E235rVHr0Yx+/9cC2lgWf4NY8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcM/RE2RVvemXRMoNOE0 Mj+MvrPjujSXAsE1AhKuX14Y/Rgm2tnDsroKnhQ+yaTvYDOnGxPjk2jx63WTsNLK 19UI7B4IFY0gO30CZrw+PGH2juhEtquJgEgznJW6kaYYVT14kddEqkdKm0DWNngL mz75FfS702bfj/oQ9zrpqJGu5toTTXvInUdQcJ4tUIK0qHwDx78Apz+5dlZsrgks E8gvrfxTpLHn1gbReYplGy4ND9q5T0qx9NVP+S3C3MrMjCHxpUD/l2dTUd0lXNZA NgeY7im9eFwIhmgi/D/jwHP1e68UDbUVn6ZCCLLlUA+hCHTtqG1cVgKmv71p5RYA ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 59870803813349525886237102662151076945 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 06:25:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-23 06:55:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irving' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trend Micro Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.giss.trendmicro.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25975132469192265058032778299950291085166528025399501275866335710928804855347100017993163812374147752882763498427967565888360609334576609916611284033999588375437731611192264399044332447806312167746776136620921927678803399711801475245200898828958603537743613495546633310605169216837488610923089704555784935297233851445290989542728336220657709038030641044724044555102529747178090585393498184345040560594024663293434323284521594129884666182781080130907626959528744364054247909073600237236415831294403949884490015464531395095619667685146200937667769383152195843087329069253748823156495555611526683636501639588560615374949 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.giss.trendmicro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.giss.trendmicro.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 131d147c73ed998ec131b2df28cda25ddec18222 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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