www.rjginc.com
- RJG, INC. -
Issued by DigiCert High Assurance CA-3
About this certificate
This digital certificate with serial number 02:a2:12:49:36:7c:98:39:fb:1e:34:8f:c7:e6:ba:a0 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
RJG, INC.
Organization:
RJG, INC.
Organization unit: IT Department
Organization unit: IT Department
State / Province:
Michigan
Locality: Traverse City
Country: US
Locality: Traverse City
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:a2:12:49:36:7c:98:39:fb:1e:34:8f:c7:e6:ba:a0Serial Number (int): 3499978966544019294243444166404520608
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 6b:04:1d:de:3d:b1:8b:21:15:25:a6:41:84:ec:a9:e7:c7:99:cc:7f
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7
Fingerprint (sha1): 53:cd:bb:16:18:ea:0e:e3:5d:a2:fe:34:c7:84:ff:98:10:35:ce:ed
Fingerprint (sha256): 04:f4:40:d0:6a:75:30:b6:e1:b1:3e:6a:c7:33:f8:6c:7e:b6:dc:56:3c:9a:ee:2e:f9:a1:c7:8d:12:9a:fa:ae
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ca3-2011d.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2011d.crl
Check the revocation status for certificate www.rjginc.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.rjginc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.rjginc.com
rjginc.com
rjginc.com
Other certificates including the domain name rjginc.com
(limited to 100 certificates)
events.pharmagmpindia.com
*.rjginc.com
*.rjginc.com
www.rjginc.com
demo.rjginc.com
zeytin.rjginc.com
*.rjginc.com
*.rjginc.com
wpstaging.rjginc.com
lcms.rjginc.com
evolution.rjginc.com
*.rjginc.com
events.projectsolution.com
demo.rjginc.com
misc.rjginc.com
*.rjginc.com
www.rjginc.com
lcms.rjginc.com
en.staging.rjginc.com
wpstaging.rjginc.com
events.projectsolution.com
*.rjginc.com
events.beerwahhideaway.com.au
misc.rjginc.com
lcms.rjginc.com
webmail.rjginc.com
events.projectsolution.com
ftp.rjginc.com
events.projectsolution.com
events.projectsolution.com
*.rjginc.com
misc.rjginc.com
*.rjginc.com
*.rjginc.com
wpstaging.rjginc.com
events.beaconstrategiesllc.com
events.projectsolution.com
events.artmarketing.es
webmail.rjginc.com
web1.rjginc.com
events.projectsolution.com
demo.rjginc.com
en.staging.rjginc.com
en.staging.rjginc.com
web1.rjginc.com
evolution.rjginc.com
lcms.rjginc.com
events.mysuruonline.in
gravity.epimod.com
demo.rjginc.com
events.rjginc.com
buildcon.newtypehq.com
plwebsrv002.rjginc.com
www.events.vendeur-afrique.com
www.rjginc.com
www.rjginc.com
wpstaging.rjginc.com
*.rjginc.com
events.projectsolution.com
misc.rjginc.com
misc.rjginc.com
misc.rjginc.com
events.inceptlabs.com.au
*.rjginc.com
wpstaging.rjginc.com
www.rjginc.com
events.inceptlabs.com.au
misc.rjginc.com
events.inceptlabs.com.au
www.bkca-intl-conferences.com
events.hansensupply.com
events.projectsolution.com
insurtechcostarica.evenet.eu
events.tazewellproud.com
event.mabasconference.com
*.rjginc.com
*.rjginc.com
zeytin.rjginc.com
en.staging.rjginc.com
eventos.turbox.me
misc.rjginc.com
demo.rjginc.com
events.artmarketing.es
events.projectsolution.com
*.rjginc.com
*.rjginc.com
www.rjginc.com
demo.rjginc.com
zeytin.rjginc.com
*.rjginc.com
*.rjginc.com
wpstaging.rjginc.com
lcms.rjginc.com
evolution.rjginc.com
*.rjginc.com
events.projectsolution.com
demo.rjginc.com
misc.rjginc.com
*.rjginc.com
www.rjginc.com
lcms.rjginc.com
en.staging.rjginc.com
wpstaging.rjginc.com
events.projectsolution.com
*.rjginc.com
events.beerwahhideaway.com.au
misc.rjginc.com
lcms.rjginc.com
webmail.rjginc.com
events.projectsolution.com
ftp.rjginc.com
events.projectsolution.com
events.projectsolution.com
*.rjginc.com
misc.rjginc.com
*.rjginc.com
*.rjginc.com
wpstaging.rjginc.com
events.beaconstrategiesllc.com
events.projectsolution.com
events.artmarketing.es
webmail.rjginc.com
web1.rjginc.com
events.projectsolution.com
demo.rjginc.com
en.staging.rjginc.com
en.staging.rjginc.com
web1.rjginc.com
evolution.rjginc.com
lcms.rjginc.com
events.mysuruonline.in
gravity.epimod.com
demo.rjginc.com
events.rjginc.com
buildcon.newtypehq.com
plwebsrv002.rjginc.com
www.events.vendeur-afrique.com
www.rjginc.com
www.rjginc.com
wpstaging.rjginc.com
*.rjginc.com
events.projectsolution.com
misc.rjginc.com
misc.rjginc.com
misc.rjginc.com
events.inceptlabs.com.au
*.rjginc.com
wpstaging.rjginc.com
www.rjginc.com
events.inceptlabs.com.au
misc.rjginc.com
events.inceptlabs.com.au
www.bkca-intl-conferences.com
events.hansensupply.com
events.projectsolution.com
insurtechcostarica.evenet.eu
events.tazewellproud.com
event.mabasconference.com
*.rjginc.com
*.rjginc.com
zeytin.rjginc.com
en.staging.rjginc.com
eventos.turbox.me
misc.rjginc.com
demo.rjginc.com
events.artmarketing.es
events.projectsolution.com
Certificate
The complete raw certificate details for www.rjginc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGwzCCBaugAwIBAgIQAqISSTZ8mDn7HjSPx+a6oDANBgkqhkiG9w0BAQUFADBm MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ZSBDQS0zMB4XDTExMDQyODAwMDAwMFoXDTEyMDYyNzEyMDAwMFowfTELMAkGA1UE BhMCVVMxETAPBgNVBAgTCE1pY2hpZ2FuMRYwFAYDVQQHEw1UcmF2ZXJzZSBDaXR5 MRIwEAYDVQQKEwlSSkcsIElOQy4xFjAUBgNVBAsTDUlUIERlcGFydG1lbnQxFzAV BgNVBAMTDnd3dy5yamdpbmMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA3rg8ZbrXWaA/NKP6pkWAJR1QyOSVvOagOSPXg8qpjRHhnmblMt5RMpyF BPXJoYNUXZVKoSQiqW67srsLjD+gyR2pu6HadmFRcTK3GuIeRRBuuHCAqCOSb8+q OzVlSaLcW+cAxxhkGbSXQoHlIYhUviLOtxeirXFlRQYjfsYEG8T8bBzFfxi+PaaR Ncce90N/oR0IMQPjHC6NYiJE3S4aRRkOMEZZcHAL5f5qiAVC6mOq98X8eG23m+Kx Z0l/Ox+WPfr7CQ4IwyN0L3yfchJ80o/72RQ91SAfdbXqZCM6TABI2bb1ZJF6z0ob hkq85ml9bKu0ITGBm0ybZ6b1MoJfyQIDAQABo4IDVDCCA1AwHwYDVR0jBBgwFoAU UOpzidsp+xCPnuUBINTeeZlIg/cwHQYDVR0OBBYEFGsEHd49sYshFSWmQYTsqefH mcx/MCUGA1UdEQQeMByCDnd3dy5yamdpbmMuY29tggpyamdpbmMuY29tMIIBxAYD VR0gBIIBuzCCAbcwggGzBglghkgBhv1sAQEwggGkMDoGCCsGAQUFBwIBFi5odHRw Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9zc2wtY3BzLXJlcG9zaXRvcnkuaHRtMIIBZAYI KwYBBQUHAgIwggFWHoIBUgBBAG4AeQAgAHUAcwBlACAAbwBmACAAdABoAGkAcwAg AEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAGMAbwBuAHMAdABpAHQAdQB0AGUAcwAg AGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAgAEQAaQBnAGkAQwBl AHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkAaQBu AGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMAaAAg AGwAaQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIAZQAg AGkAbgBjAG8AcgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIABy AGUAZgBlAHIAZQBuAGMAZQAuMHsGCCsGAQUFBwEBBG8wbTAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAChjlodHRwOi8vY2Fj ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlQ0EtMy5jcnQw DAYDVR0TAQH/BAIwADBlBgNVHR8EXjBcMCygKqAohiZodHRwOi8vY3JsMy5kaWdp Y2VydC5jb20vY2EzLTIwMTFkLmNybDAsoCqgKIYmaHR0cDovL2NybDQuZGlnaWNl cnQuY29tL2NhMy0yMDExZC5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMA4GA1UdDwEB/wQEAwIFoDANBgkqhkiG9w0BAQUFAAOCAQEAl7VDZJHTvP67 o3lqalerXngUS1WO9XSD7fM6lNDlCQfCZSrlzpvOOdQ5hMIzl+Nfrje/cmuFopaw 2nOcL3FHFHHJTY89tUytFBc+RINtkIswuAgvStvT06JYeheUg53zu87fWkhWn3g9 N3675LeKcJC0qQ6FmXvgP0r3KOQPTZgiNsANkAR/0S/AlNP/9fsKpPsdQqWxMhYH 3HZer8mmsKkGDYNDxhuPttaC2ss4PVRQqsfwmG/Mkisgu/UB21+PCDIZyq9K9xPu r0NGbJtNK11xwN1FvjEx5lxQAAFZ4yVnI9Pt04Om1rYNONWVJXaESR3MVdh5m/kU /kebjhLhHg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rg8ZbrXWaA/NKP6pkWA JR1QyOSVvOagOSPXg8qpjRHhnmblMt5RMpyFBPXJoYNUXZVKoSQiqW67srsLjD+g yR2pu6HadmFRcTK3GuIeRRBuuHCAqCOSb8+qOzVlSaLcW+cAxxhkGbSXQoHlIYhU viLOtxeirXFlRQYjfsYEG8T8bBzFfxi+PaaRNcce90N/oR0IMQPjHC6NYiJE3S4a RRkOMEZZcHAL5f5qiAVC6mOq98X8eG23m+KxZ0l/Ox+WPfr7CQ4IwyN0L3yfchJ8 0o/72RQ91SAfdbXqZCM6TABI2bb1ZJF6z0obhkq85ml9bKu0ITGBm0ybZ6b1MoJf yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3499978966544019294243444166404520608 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-27 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Traverse City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RJG, INC.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rjginc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28115753824234379760698634969402177722418331153499464722958841585443504920717585855025855552030184393059292520857960248382216217182315926973805038680219341833760833938921592851493671792932007806123740835586280413901425206972814037856789197006117408102061836077278439081423640788264277118707062295924566855456119179866222779627358819821361154562045968744943523731859289911615703782374615057209139213811101082342744348409704564870898540863414902137254483496634316173833766725224815124015422201259545144826054139409476530815463637161077135844087748097397279860700118795129390777975717431430055712948385948365539256721353 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b041dde3db18b211525a64184eca9e7c799cc7f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rjginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjginc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2011d.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2011d.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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