ptkttfim.keybank.com
- Key Bank -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 0b:18:04:23:af:c3:f2:83:69:fa:9d:9c:1d:e2:7f:c5 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Key Bank
Organization:
Key Bank
Organization unit: CSC
Organization unit: CSC
State / Province:
Ohio
Locality: Cleveland
Country: US
Locality: Cleveland
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:18:04:23:af:c3:f2:83:69:fa:9d:9c:1d:e2:7f:c5Serial Number (int): 14746207035259775561369278376027783109
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 29:03:e8:82:66:3f:91:4c:0b:71:25:6c:a7:76:17:8e:63:f6:e5:ac
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): ac:cf:9b:da:c1:3a:2c:a4:cb:f5:95:65:11:dc:19:f1:4b:f0:6a:7e
Fingerprint (sha256): 05:4e:23:25:57:1b:82:21:be:f4:5c:3a:7d:6b:f7:27:eb:a6:29:44:af:a0:3b:49:1c:36:0e:53:e0:0b:0c:d6
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate ptkttfim.keybank.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ptkttfim.keybank.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ptkttfim.keybank.com
Other certificates including the domain name keybank.com
(limited to 100 certificates)
clearsight-qv.keybank.com
online.key.com
conv-gw.keybank.com
pci.externalapi.keybank.com
keybanksamlsigner-jalprod.keybank.com
CICQC02W.KEYBANK.COM
itfcp.keybank.com
pdpaasz2.keybank.com
gtm.keybank.com
timetrade-spsigner.keybank.com
timeonline.keybank.com
ispd44.keybank.com
intranetg.keybank.com
onlinee.keybank.com
Keybank-LCO-QV-EmployeeEndUser-SAMLSigner.keybank.com
sdc01ndmftpa01x.keybank.com
cwb02qdpa02r.keybank.com
kttrs3.keybank.com
awc-airwatch-samlcert.keybank.com
api-lab.keybank.com
SDC01IGWRGQA01S.corp.keybank.com
applicant1q.keybank.com
mdm.keybank.com
sdc01rpaapta01s.corp.keybank.com
wmpd99.keybank.com
docex.keybank.com
MQQ9CHINV.keybank.com
CICQN04W.KEYBANK.COM
qonline10.keybank.com
onlinea.keybank.com
EAPMBlox-it.keybank.com
CWB02IGWRGPA01S.corp.keybank.com
kttrs4.keybank.com
CICPN02W.KEYBANK.COM
partner-api-it2.keybank.com
onlinee.keybank.com
cagek.keybank.com
ven-ssl.keybank.com
aem-author-stage.keybank.com
worldox.keybank.com
asx-spsigner.keybank.com
hwdemo.keybank.com
OH01.keybank.com
video.key.com
ptfim6.keybank.com
sbc-sdc.keybank.com
isit75a.keybank.com
api-qv.keybank.com
keybanksamlsigner-xsoar.keybank.com
pdkttfim.keybank.com
qonline1.keybank.com
SDC01SFTSLPA02S.INTDMZ.Keybank.com
keybanksamlsigner-nonprodkeys2learn-pilot.keybank.com
lcosbdev.keybank.com
ptkttfim.keybank.com
qonline10.keybank.com
qvemail.keybank.com
receivergw.keybank.com
qonlinerep.keybank.com
tchrtp3.keybank.com
qvawa.keybank.com
csc06ctxcagt02s.keybank.com
onlinej.keybank.com
keybanksamlsigner-cyb.keybank.com
sdc01tdpaasz01ws.keybank.com
keybanksamlsigner.ccluat.keybank.com
keybank.com
qvlawreview.keybank.com
sdc01poraoem1.keybank.com
keybanksamlsigner-boomtown.keybank.com
wmit92c.keybank.com
outlook.keybank.com
pdpa2.keybank.com
wmit92c.keybank.com
connect.corp.keybank.com
itkttrs3a.keybank.com
CICPN04W.KEYBANK.COM
cwb02pucrpul11.keybank.com
onlinee.keybank.com
hronline.keybank.com
ptkttrs3a.keybank.com
pdfim6.keybank.com
bonline.key.com
pdfim6.keybank.com
pdpa2.keybank.com
keybanksamlsigner-timetrade.keybank.com
qonlinecxp.keybank.com
sapience-keybanksamlsigner.keybank.com
obsdev1obiee.keybank.com
dynatrace-np.keybank.com
filenet.keybank.com
awconsole.keybank.com
keybanksamlsigner-elk-nonprod.keybank.com
cwb02tndmshr01.keybank.com
applicant3q.keybank.com
kttrs4.keybank.com
online.key.com
lmp-gcp-dev-extapi.keybank.com
Keybanksamlsigner-qvrisk.keybank.com
online.key.com
online.key.com
conv-gw.keybank.com
pci.externalapi.keybank.com
keybanksamlsigner-jalprod.keybank.com
CICQC02W.KEYBANK.COM
itfcp.keybank.com
pdpaasz2.keybank.com
gtm.keybank.com
timetrade-spsigner.keybank.com
timeonline.keybank.com
ispd44.keybank.com
intranetg.keybank.com
onlinee.keybank.com
Keybank-LCO-QV-EmployeeEndUser-SAMLSigner.keybank.com
sdc01ndmftpa01x.keybank.com
cwb02qdpa02r.keybank.com
kttrs3.keybank.com
awc-airwatch-samlcert.keybank.com
api-lab.keybank.com
SDC01IGWRGQA01S.corp.keybank.com
applicant1q.keybank.com
mdm.keybank.com
sdc01rpaapta01s.corp.keybank.com
wmpd99.keybank.com
docex.keybank.com
MQQ9CHINV.keybank.com
CICQN04W.KEYBANK.COM
qonline10.keybank.com
onlinea.keybank.com
EAPMBlox-it.keybank.com
CWB02IGWRGPA01S.corp.keybank.com
kttrs4.keybank.com
CICPN02W.KEYBANK.COM
partner-api-it2.keybank.com
onlinee.keybank.com
cagek.keybank.com
ven-ssl.keybank.com
aem-author-stage.keybank.com
worldox.keybank.com
asx-spsigner.keybank.com
hwdemo.keybank.com
OH01.keybank.com
video.key.com
ptfim6.keybank.com
sbc-sdc.keybank.com
isit75a.keybank.com
api-qv.keybank.com
keybanksamlsigner-xsoar.keybank.com
pdkttfim.keybank.com
qonline1.keybank.com
SDC01SFTSLPA02S.INTDMZ.Keybank.com
keybanksamlsigner-nonprodkeys2learn-pilot.keybank.com
lcosbdev.keybank.com
ptkttfim.keybank.com
qonline10.keybank.com
qvemail.keybank.com
receivergw.keybank.com
qonlinerep.keybank.com
tchrtp3.keybank.com
qvawa.keybank.com
csc06ctxcagt02s.keybank.com
onlinej.keybank.com
keybanksamlsigner-cyb.keybank.com
sdc01tdpaasz01ws.keybank.com
keybanksamlsigner.ccluat.keybank.com
keybank.com
qvlawreview.keybank.com
sdc01poraoem1.keybank.com
keybanksamlsigner-boomtown.keybank.com
wmit92c.keybank.com
outlook.keybank.com
pdpa2.keybank.com
wmit92c.keybank.com
connect.corp.keybank.com
itkttrs3a.keybank.com
CICPN04W.KEYBANK.COM
cwb02pucrpul11.keybank.com
onlinee.keybank.com
hronline.keybank.com
ptkttrs3a.keybank.com
pdfim6.keybank.com
bonline.key.com
pdfim6.keybank.com
pdpa2.keybank.com
keybanksamlsigner-timetrade.keybank.com
qonlinecxp.keybank.com
sapience-keybanksamlsigner.keybank.com
obsdev1obiee.keybank.com
dynatrace-np.keybank.com
filenet.keybank.com
awconsole.keybank.com
keybanksamlsigner-elk-nonprod.keybank.com
cwb02tndmshr01.keybank.com
applicant3q.keybank.com
kttrs4.keybank.com
online.key.com
lmp-gcp-dev-extapi.keybank.com
Keybanksamlsigner-qvrisk.keybank.com
online.key.com
Certificate
The complete raw certificate details for ptkttfim.keybank.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIQCxgEI6/D8oNp+p2cHeJ/xTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwMTMwMDAwMDAwWhcNMTkwMTEzMTIw MDAwWjBwMQswCQYDVQQGEwJVUzENMAsGA1UECBMET2hpbzESMBAGA1UEBxMJQ2xl dmVsYW5kMREwDwYDVQQKEwhLZXkgQmFuazEMMAoGA1UECxMDQ1NDMR0wGwYDVQQD ExRwdGt0dGZpbS5rZXliYW5rLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANVlMrhY96AiFBs1zFc5TJD5ry+EaZJ1ggDK4vgZEaonNOSCgKEKOILg bgaFnesVa4ZUwnA3BPhJ0vfb5AwDXkUnqAPmQWYndWc65Qm1DJDN0/AHPYGE5z1V rQrrVVxiNm5x41d7sHlOFTR1mMj5OzMTM47l8IMV7hXSnM6hXN5j7p54tujJQCN9 G3rd8ij1RCE6UYtW1p6ibSphB0fMrXFatJv1C4Uxp2ouAKEfKVKeSrblvHG0nrcv KOXtWy+IE9zuldtn5dajPOq4G9/OnXuvzCAFETqbdwLWHHyeCJfsHqRM+AONuC1p WL3W3sO9tHMjTJ7vguc3FV4Z1wIK1GMCAwEAAaOCAfEwggHtMB8GA1UdIwQYMBaA FCRuKy3QapJRUSVpAaqaR6aJ50AgMB0GA1UdDgQWBBQpA+iCZj+RTAtxJWyndheO Y/blrDAfBgNVHREEGDAWghRwdGt0dGZpbS5rZXliYW5rLmNvbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHcGA1UdHwRwMG4w NaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENB RzIuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRH bG9iYWxDQUcyLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUF BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB0Bggr BgEFBQcBAQRoMGYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv bTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD ZXJ0R2xvYmFsQ0FHMi5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAOhEGK07OazxAqdHES0cHXZmKUhbo9kSHuJp+ D0O3xR8WWGBSRzFyCX8NIJWnev1qIdchdR0eLv1xVU688NdO6Ws+Ho+54w8svMdW VYQRW7lgTS9T4LT9TmTP4/RhV70IGZUXg0a7JxNNa3Op07FmF7Eo55QL8Me54O17 SC69kArkht6yH1XWIazmi3Q94DA4GTTDoi5g9acEsZuU6GT4fRhzGQ8WBslkNBhh O/mG0MxquoHizEEE8Jm+LMsi9PETkqzXwRhTvRVuyjYfJV+g1kUBvC/nRT6BHVJx 9Y37/hNXTEmN3RXHGHNw0T0e1k8Kknd7eFsj053MbWwsys9f3A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WUyuFj3oCIUGzXMVzlM kPmvL4RpknWCAMri+BkRqic05IKAoQo4guBuBoWd6xVrhlTCcDcE+EnS99vkDANe RSeoA+ZBZid1ZzrlCbUMkM3T8Ac9gYTnPVWtCutVXGI2bnHjV3uweU4VNHWYyPk7 MxMzjuXwgxXuFdKczqFc3mPunni26MlAI30bet3yKPVEITpRi1bWnqJtKmEHR8yt cVq0m/ULhTGnai4AoR8pUp5KtuW8cbSety8o5e1bL4gT3O6V22fl1qM86rgb386d e6/MIAUROpt3AtYcfJ4Il+wepEz4A424LWlYvdbew720cyNMnu+C5zcVXhnXAgrU YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14746207035259775561369278376027783109 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cleveland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Key Bank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ptkttfim.keybank.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26938661613312556284165990761549550570060678339620087506617889224671986474150143563816676748952759579061035585669643938581074263141050226083611128600478320991868596592108479670250500647201983999010284954927248090752204663847644478915999546780760203625735883719204055206140956733573386634213656653839865043618121278273323607601915913218711484831320908027893711809731785461007977546533898249642992077446768229832381825850861974923186537603926625575191347802183119436744709272497466208722846491054421702383625837176742811558982131683750347457109479206501572005330762433531378057054862818280153385940922993383951846528099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2903e882663f914c0b71256ca776178e63f6e5ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptkttfim.keybank.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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