Tun-r.verisign.com
- Verisign, Inc -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 0f:c0:c2:7f:82:65:be:66:45:11:61:33:c2:dd:0a:d0 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Verisign, Inc
Organization:
Verisign, Inc
Organization unit: Enterprise IT
Organization unit: Enterprise IT
State / Province:
Virginia
Locality: Reston
Country: US
Locality: Reston
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:c0:c2:7f:82:65:be:66:45:11:61:33:c2:dd:0a:d0Serial Number (int): 20939285823408224654600524516239936208
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 44:e6:79:cb:eb:23:dd:2b:ad:55:79:82:a0:26:ad:de:cc:d0:ca:f7
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): ca:ff:92:0c:15:8c:33:da:62:d7:0d:ca:3a:c2:b5:40:e0:72:50:07
Fingerprint (sha256): 05:e5:1d:b8:df:88:c0:63:71:99:b9:cf:57:4b:48:62:db:d6:2a:f7:15:29:bf:b0:2f:3c:c3:fb:b9:6c:f8:b3
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate Tun-r.verisign.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for Tun-r.verisign.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
Tun-r.verisign.com
Other certificates including the domain name verisign.com
(limited to 100 certificates)
www.verisign.com
pilotsc-admin-enroll.verisign.com
ote-accounts-otp.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
namestudio.com
sc-admin-enroll.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pilot-ocsp.verisign.com
sipaccess-dr.verisign.com
pilotonsite.verisign.com
qa.domainscope.verisign.com
mdm1.verisign.com
ipsapi.verisign.com
mem-lab.corparch.verisign.com
styleguide.verisign.com
connect.verisign.com
idprotect.vip.symantec.com
advocacy.verisign.com
ite-rdap.verisign.com
investor.verisign.com
pilot-pkiservices.verisign.com
ncilg1vacmpub.corparch.verisign.com
accountsdr-otp.verisign.com
knowledge.symantec.com
ssp.vip.symantec.com
www.tlab.verisign.com
user-apis.verisign.com
cofense-reporter.verisign.com
epki-admin.verisign.com
jamfdp.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pkiservices.verisign.com
pilotonsite.verisign.com
ilg1vcsexpe.verisign.com
testdrive.verisign.com
mem-lab.corparch.verisign.com
testcr-payflow.verisign.com
Tun-r.verisign.com
pilot-certmanager.verisign.com
ua.verisign.com
eol-redirect.verisign.net
accounts.verisign.com
directservice.verisign.com
ote-accounts.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
manager.verisign.com
ua-portal.verisign.com
view.messages.verisign.com
seal.websecurity.norton.com
advocacy.verisign.com
ote-login.verisign.com
gp.verisign.com
sentinel.websecurity.symantec.com
publicdnsforum.verisign.com
pilotsc-admin-enroll.verisign.com
pilot-enterprise-ssl-admin.jp.websecurity.symantec.com
ssl-certificate-center-ncsa-ilg.verisign.net
mem.verisign.com
publicdnsforum.verisign.com
certmanager.websecurity.symantec.com
acano.vrsn.com
ias.verisign.com
pilot-ua.verisign.com
corpqa1uccxpub-ms.corparch.verisign.com
services-auth.vip.symantec.com
seal.websecurity.norton.com
support.verisign.com
neilg1lxsfm201.verisign.com
user-apisote.verisign.com
payments.verisign.com
userservices.vip.symantec.com
sc-admin-enroll.verisign.com
qa.verisigndns.com
verified-domains.verisign.com
pilotservicecenter.verisign.com
vendorportal.verisign.com
publicdnsforum.verisign.com
userservices.vip.symantec.com
gp-qa.verisign.com
lwas.verisign.com
click.messages.verisign.com
ssl-certificate-center.verisign.com
investor.verisign.com
pilot-epki-admin.verisign.com
os1-accounts-otp.verisign.com
accountsdr.verisign.com
startonline.verisign.com
sandboxkms.verisign.com
mdm1.verisign.com
vipdeveloper.verisign.com
www.verisign.com
ssl-tools.verisign.com
sealinfo.verisign.com
checkout.verisign.com
vidn.verisign.com
webmail.verisign.com
connect.verisign.com
seal.verisign.com
epki-admin.verisign.com
authentication.verisign.com
pilotsc-admin-enroll.verisign.com
ote-accounts-otp.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
namestudio.com
sc-admin-enroll.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pilot-ocsp.verisign.com
sipaccess-dr.verisign.com
pilotonsite.verisign.com
qa.domainscope.verisign.com
mdm1.verisign.com
ipsapi.verisign.com
mem-lab.corparch.verisign.com
styleguide.verisign.com
connect.verisign.com
idprotect.vip.symantec.com
advocacy.verisign.com
ite-rdap.verisign.com
investor.verisign.com
pilot-pkiservices.verisign.com
ncilg1vacmpub.corparch.verisign.com
accountsdr-otp.verisign.com
knowledge.symantec.com
ssp.vip.symantec.com
www.tlab.verisign.com
user-apis.verisign.com
cofense-reporter.verisign.com
epki-admin.verisign.com
jamfdp.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pkiservices.verisign.com
pilotonsite.verisign.com
ilg1vcsexpe.verisign.com
testdrive.verisign.com
mem-lab.corparch.verisign.com
testcr-payflow.verisign.com
Tun-r.verisign.com
pilot-certmanager.verisign.com
ua.verisign.com
eol-redirect.verisign.net
accounts.verisign.com
directservice.verisign.com
ote-accounts.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
manager.verisign.com
ua-portal.verisign.com
view.messages.verisign.com
seal.websecurity.norton.com
advocacy.verisign.com
ote-login.verisign.com
gp.verisign.com
sentinel.websecurity.symantec.com
publicdnsforum.verisign.com
pilotsc-admin-enroll.verisign.com
pilot-enterprise-ssl-admin.jp.websecurity.symantec.com
ssl-certificate-center-ncsa-ilg.verisign.net
mem.verisign.com
publicdnsforum.verisign.com
certmanager.websecurity.symantec.com
acano.vrsn.com
ias.verisign.com
pilot-ua.verisign.com
corpqa1uccxpub-ms.corparch.verisign.com
services-auth.vip.symantec.com
seal.websecurity.norton.com
support.verisign.com
neilg1lxsfm201.verisign.com
user-apisote.verisign.com
payments.verisign.com
userservices.vip.symantec.com
sc-admin-enroll.verisign.com
qa.verisigndns.com
verified-domains.verisign.com
pilotservicecenter.verisign.com
vendorportal.verisign.com
publicdnsforum.verisign.com
userservices.vip.symantec.com
gp-qa.verisign.com
lwas.verisign.com
click.messages.verisign.com
ssl-certificate-center.verisign.com
investor.verisign.com
pilot-epki-admin.verisign.com
os1-accounts-otp.verisign.com
accountsdr.verisign.com
startonline.verisign.com
sandboxkms.verisign.com
mdm1.verisign.com
vipdeveloper.verisign.com
www.verisign.com
ssl-tools.verisign.com
sealinfo.verisign.com
checkout.verisign.com
vidn.verisign.com
webmail.verisign.com
connect.verisign.com
seal.verisign.com
epki-admin.verisign.com
authentication.verisign.com
Certificate
The complete raw certificate details for Tun-r.verisign.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIQD8DCf4JlvmZFEWEzwt0K0DANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwNDIyMDAwMDAwWhcNMjAwNDIyMTIw MDAwWjB+MQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExDzANBgNVBAcT BlJlc3RvbjEWMBQGA1UEChMNVmVyaXNpZ24sIEluYzEWMBQGA1UECxMNRW50ZXJw cmlzZSBJVDEbMBkGA1UEAxMSVHVuLXIudmVyaXNpZ24uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokWXdR6PxxXVFmWJS8ZB0kIatg80J0rmVaoP iAScpWZyE3/ohTCV7ufobI3TM0/lDUukchvjCGZ/3MMyBaViWvNwa3l+ojKlS4Th 289Zi8irkhR0+0Yel99hLje+QGn6q4It/wnxEXig9PONDy9W44II+iMFkPc9OY2H rOjBbd2rpyy9rVGYE6P4b3bPW6SytmYIC2rLSKWyX7Je7J+nQce3HAl0tcmXzg5w IrMgKOdgIZ1SgJfiBUI449BQ6/Df3Ye7nSe6ORsrBJDJcEoNRDUweg41oniSZVY3 VCWqP2BXX5podnRK6WcuSlX2huvi7Y/qRmM3CwhamF3COWBFzQIDAQABo4IB7zCC AeswHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0OBBYEFETm ecvrI90rrVV5gqAmrd7M0Mr3MB0GA1UdEQQWMBSCElR1bi1yLnZlcmlzaWduLmNv bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEdsb2JhbENBRzIuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdpY2VydC5j b20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwB ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgG BmeBDAECAjB0BggrBgEFBQcBAQRoMGYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQwCQYDVR0TBAIwADATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoZ1N2PjjT6aLyA4/a9z 3LI6reWkMiyw/vfzodZ8nSAp+mQNNcxokxiZ7S3rJShYaO+5b15anmw+Rnj/0wrR lwnLPs5lKW0gtmjmJ/UCMP2uxFxNeSfuSgRG0NIpMhKK/wiROA5bwifIFbNz7Snf 9IzH+DXyH4l1Ed9O5DUM9U+IeUx/jBWzY9SMhQzbw4Xw6ZSMsKIwfZPJlS0ZjihF 0FA4u5JL3t+khE5faC9GBxCEONWar+h0phio+xifeOjHUo1V4eUWYsvdRuJH6BJS qyLq5ocx/f4SPqgsIft2M0CDm2StmN3huTLULoFZ7jfbqsIZIea7suzOubgMZvAA Ag== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokWXdR6PxxXVFmWJS8ZB 0kIatg80J0rmVaoPiAScpWZyE3/ohTCV7ufobI3TM0/lDUukchvjCGZ/3MMyBaVi WvNwa3l+ojKlS4Th289Zi8irkhR0+0Yel99hLje+QGn6q4It/wnxEXig9PONDy9W 44II+iMFkPc9OY2HrOjBbd2rpyy9rVGYE6P4b3bPW6SytmYIC2rLSKWyX7Je7J+n Qce3HAl0tcmXzg5wIrMgKOdgIZ1SgJfiBUI449BQ6/Df3Ye7nSe6ORsrBJDJcEoN RDUweg41oniSZVY3VCWqP2BXX5podnRK6WcuSlX2huvi7Y/qRmM3CwhamF3COWBF zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20939285823408224654600524516239936208 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verisign, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tun-r.verisign.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20484922316682432478020390256820003346406470449346392635035287667186151256152274374437841153179097615040124753818193662798118855257455572479791255558852668403920922187689918678973087561390241051933817783422874254727230570399603780602365408054333481439772943417925097652268816983750828153800246438254566942892785990204840587638475909786745507698862036934996759038975112573434985815752035279406367503288140256451738153473722051987153363846037296615773579431762831463845314490173603332703069605783286519063018230454551792227669079630831598576711448842650883212875587657637319842458878226117302203960138052008942426408397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 44e679cbeb23dd2bad557982a026addeccd0caf7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Tun-r.verisign.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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