psd2.api.kbc-group.com
- KBC Group NV -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 09:cc:f2:8f:6e:ba:e0:60:ca:56:6d:94:0f:48:ed:f9 was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
KBC Group NV
Organization:
KBC Group NV
State / Province:
Brussels
Locality: Brussels
Country: BE
Locality: Brussels
Country: BE
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:cc:f2:8f:6e:ba:e0:60:ca:56:6d:94:0f:48:ed:f9Serial Number (int): 13027200228225941814753189694483787257
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d9:6d:11:1f:7a:34:d0:e5:b3:31:12:bf:88:69:c3:28:88:f9:37:06
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): c5:60:d6:aa:d8:fd:d6:ac:42:45:11:39:68:40:98:ad:c0:c4:3d:cd
Fingerprint (sha256): 05:0f:51:83:37:7d:63:27:76:ef:93:c9:4c:ec:c9:27:e3:f8:24:7b:48:0f:ef:ce:b1:b4:41:d6:3f:54:2d:71
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate psd2.api.kbc-group.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for psd2.api.kbc-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
psd2.api.kbc-group.com
psd2.api.kbcbrussels.be
psd2.api.kbc.be
psd2.api.cbc.be
psd2.api.kbcbrussels.be
psd2.api.kbc.be
psd2.api.cbc.be
Other certificates including the domain name kbc-group.com
(limited to 100 certificates)
mftdashboard.acc.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
Certificate
The complete raw certificate details for psd2.api.kbc-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIQCczyj2664GDKVm2UD0jt+TANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA5MDkwMDAwMDBa Fw0yMzA5MTIyMzU5NTlaMGsxCzAJBgNVBAYTAkJFMREwDwYDVQQIEwhCcnVzc2Vs czERMA8GA1UEBxMIQnJ1c3NlbHMxFTATBgNVBAoTDEtCQyBHcm91cCBOVjEfMB0G A1UEAxMWcHNkMi5hcGkua2JjLWdyb3VwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKjSujioCieifuWA8e26aDwfDU37Q6iEp2ym2hVbI7ZgN6xN Qxfyzj8k9AD3vcCAQkQId4XfITOqgmlc+ZjBZN6oEccem9ZEjKmQpIIVDntB4GTl I6BA4YPlH/3vfY0eL1wEarUTnBuH7okxh9XYRw5RV7W6rb/A6eafkPq+Hfel+lFI KUfMe9lI4MGD0UPUpr4IlgA9qQbz2JQq+7h/L8Ycv5TQhdmBa3coMLDl1SUb0zwM Jbcp0OjFqpfcHzaP99dZVYSpmjqi96Vsz3QLP582rSe+EqsaA9V9pH3E65lK/6IG 3wBcKXUhbv6nIwMHmwq172aiMxX47o3iAlRcbWMCAwEAAaOCAkQwggJAMB8GA1Ud IwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBTZbREfejTQ5bMx Er+IacMoiPk3BjBcBgNVHREEVTBTghZwc2QyLmFwaS5rYmMtZ3JvdXAuY29tghdw c2QyLmFwaS5rYmNicnVzc2Vscy5iZYIPcHNkMi5hcGkua2JjLmJlgg9wc2QyLmFw aS5jYmMuYmUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2Vy dC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpo dHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIw Q0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0 dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYB BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0 cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAy MENBMS0xLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAykFV+XDbnXP+2tS4QRTm0nGPnqB8i4aDvLCpSmy3uHslc uk6HOgqyol5nWeakAIyABsWVMSazeFLy+j6D9aSThZiHHhcJ1KdWr0GfW4V/j3YX 0Crtl3RgDNS2gRW4NMWZlxqJ8DorqeRxwjkCoDBAgvDqmUu5xgQMdhP/tVueZKPg tkZPnEHSoi4MtwIfHcAy+PRkw5w5lvPrdUbKzfg+qxiLDrT7clU2YDlLu6eLVnc9 mA/L0fWwV1vzloU5jOdJ50ALrjjsYT0z+qaMIuAbOPkpigl9kWPnWsKvuaXRKvnG Lp6wZuKztfWK0V+vHe+vo1I+cVzA5W1B2Ew94K4a -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNK6OKgKJ6J+5YDx7bpo PB8NTftDqISnbKbaFVsjtmA3rE1DF/LOPyT0APe9wIBCRAh3hd8hM6qCaVz5mMFk 3qgRxx6b1kSMqZCkghUOe0HgZOUjoEDhg+Uf/e99jR4vXARqtROcG4fuiTGH1dhH DlFXtbqtv8Dp5p+Q+r4d96X6UUgpR8x72UjgwYPRQ9SmvgiWAD2pBvPYlCr7uH8v xhy/lNCF2YFrdygwsOXVJRvTPAwltynQ6MWql9wfNo/311lVhKmaOqL3pWzPdAs/ nzatJ74SqxoD1X2kfcTrmUr/ogbfAFwpdSFu/qcjAwebCrXvZqIzFfjujeICVFxt YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13027200228225941814753189694483787257 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psd2.api.kbc-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21311948801467244822160953822240926073574382421360271747421843664035383480609408868413589582460793976389741192826154229295896538704832449615779667456891723749115441346276849531713608570767000770412212863566550291567145659154285718543025504585018936607731745067160226784472378750321034303872104204942729683820517791113460993215301020780176517476641782394943412036755165085378798238848796563519191002939182864681903013050383590971353016493905510777822096472988149726765363165643503020750936921996050378828995941857267190957856551654552631528294909970031779392811180544145644894037515869806148399603875034411579691789667 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d96d111f7a34d0e5b33112bf8869c32888f93706 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psd2.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psd2.api.kbcbrussels.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psd2.api.kbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psd2.api.cbc.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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