staging.autoblog.com
- Oath Inc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0a:4d:fc:b8:dd:f8:2a:42:fc:c6:35:12:d3:3b:b7:58 was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Oath Inc
Organization:
Oath Inc
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:4d:fc:b8:dd:f8:2a:42:fc:c6:35:12:d3:3b:b7:58Serial Number (int): 13697212629854563650893252450913597272
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6d:6e:11:36:64:6e:7b:47:46:c4:26:6a:de:e7:d5:77:12:78:55:62
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 1a:5f:b3:0c:49:29:3e:17:85:16:d9:5a:77:54:cc:c2:a1:75:41:50
Fingerprint (sha256): 05:1f:a5:e8:0d:68:4e:4b:52:9d:b8:3e:bb:58:0b:c5:94:ad:2f:c8:69:a2:11:b4:fb:d4:cb:06:e9:6f:e0:9d
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate staging.autoblog.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.autoblog.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.autoblog.com
stage.autoblog.com
staging.aws.autoblog.com
origin.staging.autoblog.com
staging.autoblog-aws-prod.aws.oath.cloud
staging-test.autoblog-aws-prod.aws.oath.cloud
stage.autoblog.com
staging.aws.autoblog.com
origin.staging.autoblog.com
staging.autoblog-aws-prod.aws.oath.cloud
staging-test.autoblog-aws-prod.aws.oath.cloud
Other certificates including the domain name autoblog.com
(limited to 100 certificates)
login.yahoo.com
*.stage.login.yahoo.com
*.aol.com
*.add.my.aol.com
checkout.yahoo.com
n.main.welcomescreen.aol.com
*.login.yahoo.com
checkout.yahoo.com
assist.aol.com
src5.yahoo.com
src5.yahoo.com
stage.guce.oath.com
staging.autoblog.com
*.aol.com
s.autoblog.com
*.yahoo.com
stage.guce.oath.com
stage.guce.oath.com
assist.aol.com
checkout.yahoo.com
stage.oidc.oath.com
dev.checkout.yahoo.com
*.stage.login.yahoo.com
*.aol.com
assist.aol.com
*.trunk.login.yahoo.com
assist.aol.com
src6.yahoo.com
login.yahoo.com
dev.checkout.yahoo.com
stage.oidc.oath.com
www.intheknow.com
trunk.guce.oath.com
trunk.guce.oath.com
*.stage.login.yahoo.com
oidc.oath.com
*.stage.login.yahoo.com
login.yahoo.com
*.add.my.aol.com
src6.yahoo.com
assist.aol.com
trunk.login.yahoo.com
stage.guce.oath.com
*.login.yahoo.com
login.yahoo.com
www.makers.com
*.login.yahoo.com
stage.guce.oath.com
www.intheknow.com
src6.yahoo.com
dev.autoblog.com
*.aol.com
src6.yahoo.com
stage.login.yahoo.com
src5.yahoo.com
checkout.yahoo.com
checkout.yahoo.com
login.yahoo.com
checkout.yahoo.com
src6.yahoo.com
*.stage.login.yahoo.com
dev.checkout.yahoo.com
dev.checkout.yahoo.com
stage.guce.oath.com
login.yahoo.com
login.yahoo.com
*.stage.login.yahoo.com
*.stage.login.yahoo.com
oidc.oath.com
guce.oath.com
src6.yahoo.com
www.makers.com
stage.login.yahoo.com
src6.yahoo.com
stage.login.yahoo.com
stage.guce.oath.com
src6.yahoo.com
*.stage.login.yahoo.com
oidc.oath.com
stage.login.yahoo.com
src5.yahoo.com
src6.yahoo.com
www.builtbygirls.com
cms.autoblog.com
*.stage.login.yahoo.com
src6.yahoo.com
*.login.yahoo.com
www.builtbygirls.com
stage.oidc.oath.com
login.yahoo.com
*.aol.com
src6.yahoo.com
*.add.my.aol.com
www.intheknow.com
stage.oidc.oath.com
*.jp.autoblog.com
view.sports.comms.yahoo.net
trunk.oidc.oath.com
*.aol.com
trunk.guce.oath.com
*.stage.login.yahoo.com
*.aol.com
*.add.my.aol.com
checkout.yahoo.com
n.main.welcomescreen.aol.com
*.login.yahoo.com
checkout.yahoo.com
assist.aol.com
src5.yahoo.com
src5.yahoo.com
stage.guce.oath.com
staging.autoblog.com
*.aol.com
s.autoblog.com
*.yahoo.com
stage.guce.oath.com
stage.guce.oath.com
assist.aol.com
checkout.yahoo.com
stage.oidc.oath.com
dev.checkout.yahoo.com
*.stage.login.yahoo.com
*.aol.com
assist.aol.com
*.trunk.login.yahoo.com
assist.aol.com
src6.yahoo.com
login.yahoo.com
dev.checkout.yahoo.com
stage.oidc.oath.com
www.intheknow.com
trunk.guce.oath.com
trunk.guce.oath.com
*.stage.login.yahoo.com
oidc.oath.com
*.stage.login.yahoo.com
login.yahoo.com
*.add.my.aol.com
src6.yahoo.com
assist.aol.com
trunk.login.yahoo.com
stage.guce.oath.com
*.login.yahoo.com
login.yahoo.com
www.makers.com
*.login.yahoo.com
stage.guce.oath.com
www.intheknow.com
src6.yahoo.com
dev.autoblog.com
*.aol.com
src6.yahoo.com
stage.login.yahoo.com
src5.yahoo.com
checkout.yahoo.com
checkout.yahoo.com
login.yahoo.com
checkout.yahoo.com
src6.yahoo.com
*.stage.login.yahoo.com
dev.checkout.yahoo.com
dev.checkout.yahoo.com
stage.guce.oath.com
login.yahoo.com
login.yahoo.com
*.stage.login.yahoo.com
*.stage.login.yahoo.com
oidc.oath.com
guce.oath.com
src6.yahoo.com
www.makers.com
stage.login.yahoo.com
src6.yahoo.com
stage.login.yahoo.com
stage.guce.oath.com
src6.yahoo.com
*.stage.login.yahoo.com
oidc.oath.com
stage.login.yahoo.com
src5.yahoo.com
src6.yahoo.com
www.builtbygirls.com
cms.autoblog.com
*.stage.login.yahoo.com
src6.yahoo.com
*.login.yahoo.com
www.builtbygirls.com
stage.oidc.oath.com
login.yahoo.com
*.aol.com
src6.yahoo.com
*.add.my.aol.com
www.intheknow.com
stage.oidc.oath.com
*.jp.autoblog.com
view.sports.comms.yahoo.net
trunk.oidc.oath.com
*.aol.com
trunk.guce.oath.com
Certificate
The complete raw certificate details for staging.autoblog.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIQCk38uN34KkL8xjUS0zu3WDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMDA0MDUwMDAwMDBaFw0yMDEwMDIxMjAwMDBa MGgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT dW5ueXZhbGUxETAPBgNVBAoTCE9hdGggSW5jMR0wGwYDVQQDExRzdGFnaW5nLmF1 dG9ibG9nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIR5t7Na MQm+/H+fv/OLYz/OQvot5sdX2zQ0Op0vs1YbHKhNR6vcqNJ1v6vZP5BUlmyHsbvO dvtGX/FmKWPKA/AwCTYeRVYIZDkr9sL7b9CdcoDgzgAro0zWo3oas2fidc5pw6s6 gibtuZV75YxHKCakT9Kil7GwQ+59pGPfPus5s/r9hvdDZzenylHTr1kOwezgYkB5 U+h7mewshM9WjZVmEmevSUz2YlH2DNN0zIEGI+QzE3xK5VKDhSfWRCJUE/IVcuB0 siCfXkSeJl2Gw2yFkUKHhHmaEotIJtiCt4iV4vH001+htvlOXuv4C4hmndos1gF4 y5OemxK/s5f9P5MCAwEAAaOCAqkwggKlMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZ ZWRiohK4WXI7MB0GA1UdDgQWBBRtbhE2ZG57R0bEJmre59V3EnhVYjCBxQYDVR0R BIG9MIG6ghRzdGFnaW5nLmF1dG9ibG9nLmNvbYISc3RhZ2UuYXV0b2Jsb2cuY29t ghhzdGFnaW5nLmF3cy5hdXRvYmxvZy5jb22CG29yaWdpbi5zdGFnaW5nLmF1dG9i bG9nLmNvbYIoc3RhZ2luZy5hdXRvYmxvZy1hd3MtcHJvZC5hd3Mub2F0aC5jbG91 ZIItc3RhZ2luZy10ZXN0LmF1dG9ibG9nLWF3cy1wcm9kLmF3cy5vYXRoLmNsb3Vk MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw dQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTIt aGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29t L3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAq MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeB DAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k aWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0 LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1Ud EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AJsggdJRM25QowXkWdwp7bwfNbgW5oJBqXuZ6aeld9HT+yeJpu6GXabUPHQWxNXI bXOrNj5vXz2ouSxsJdt4x6VkFsLdaVz+TxbTrdttY5AjqXREPV0N/oMt9ARMVB0e RKHwh4bsWfYHCWCGSLCK6E8n3nwHFOop1HZPNGEVp2yiVd3AZj7BRiMOUWnX/swV jF13X8c17iO5KsnPXJEWyYc/tlpGXH1VSmE7UWqqWwn7E0zsxkyI2WC2boe+A/KJ 1tRTqcj4isyv6ymg8gsNGLQyATraIIixVu3bXdn275plZdXULypy/NYJQlRk1Bgd fuIGD+V4+N8lg6Tc6OV+1Jg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHm3s1oxCb78f5+/84tj P85C+i3mx1fbNDQ6nS+zVhscqE1Hq9yo0nW/q9k/kFSWbIexu852+0Zf8WYpY8oD 8DAJNh5FVghkOSv2wvtv0J1ygODOACujTNajehqzZ+J1zmnDqzqCJu25lXvljEco JqRP0qKXsbBD7n2kY98+6zmz+v2G90NnN6fKUdOvWQ7B7OBiQHlT6HuZ7CyEz1aN lWYSZ69JTPZiUfYM03TMgQYj5DMTfErlUoOFJ9ZEIlQT8hVy4HSyIJ9eRJ4mXYbD bIWRQoeEeZoSi0gm2IK3iJXi8fTTX6G2+U5e6/gLiGad2izWAXjLk56bEr+zl/0/ kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13697212629854563650893252450913597272 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.autoblog.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16723477431459040700910631866426497510931259514467594802085754040645475283517065908562323188001380076784006389256938019943917115877720423275566790960322525934386162696235458571016196540877513908388194777483624871911675946830913966294873582554718312463010016503352848341465923995324550454824862219557013998421380903154557690478837612006802083616191695492499161484698876351840532854202313359479663722421973741392697231658170292647646243436403237016304192439420085903353911484656058741794199876106002903602462417068824537531522146347247872298645095931567561709041349695375774931802505397300192535173787394777253737742227 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d6e1136646e7b4746c4266adee7d57712785562 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.autoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.autoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.aws.autoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.staging.autoblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.autoblog-aws-prod.aws.oath.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-test.autoblog-aws-prod.aws.oath.cloud' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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