*.dotdigital.com
- DOTDIGITAL GROUP PLC -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 39:32:c2:a3:d0:50:b7:20:28:8a:53:08 was issued on by GlobalSign nv-sa.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DOTDIGITAL GROUP PLC
Organization:
DOTDIGITAL GROUP PLC
State / Province:
London
Locality: London
Country: GB
Locality: London
Country: GB
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 39:32:c2:a3:d0:50:b7:20:28:8a:53:08Serial Number (int): 17702011011725060008649052936
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 45:95:60:18:dc:2e:09:c8:60:ef:08:08:84:01:8e:ec:4c:c7:55:67
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): be:ba:69:70:06:8e:f3:1e:a8:9a:c1:4b:3d:08:fa:a4:67:75:c4:d5
Fingerprint (sha256): 06:3b:35:f3:12:29:b1:e8:d3:e0:32:7a:e7:5a:a4:7b:67:be:23:e6:29:10:f0:08:9d:9e:92:76:c3:41:cc:fa
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate *.dotdigital.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.dotdigital.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dotdigital.com
dotdigital.co.uk
dotmailer.com
dotmailer.co.uk
*.dotmailer.co.uk
*.dotmailer.com
*.dotdigital.co.uk
dotdigital.com
dotdigital.co.uk
dotmailer.com
dotmailer.co.uk
*.dotmailer.co.uk
*.dotmailer.com
*.dotdigital.co.uk
dotdigital.com
Other certificates including the domain name dotdigital.com
(limited to 100 certificates)
systemstatus.rrc.ca
status.hpiinc.com
*.dotdigital.com
servicestation.dotdigital.com
dynco-cpaas.staging.dotdigital.com
r2-login.dotdigital.com
status.digitary.net
developer.dotdigital.com
r1-app.dotdigital.com
cc3.status.jasper.com
r1-login.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
customersuccess.dotdigital.com
developer-cpaas.dotdigital.com
jose.dotdigital.com
*.dotdigital.com
endpointprotection.status.symantec.com
r3-login-stg.dotdigital.com
statusp.dotdigital.com
integrations.dotdigital.com
stg.dotdigitalstatus.com
status.atera.com
dotdigital.com
learning.dotdigital.com
www.dotdigital.com
statuspage.vantage.online
r3-login.dotdigital.com
docs.cpaas.dotdigital.com
customisations-cpaas.staging.dotdigital.com
developer.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
r1-login.dotdigital.com
cc3.status.jasper.com
apps-cpaas.staging.dotdigital.com
dotdigital.com
systemstatus.rrc.ca
apps-cpaas.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
email.dotdigital.com
*.thor.dotdigital.com
dynco-cpaas.staging.dotdigital.com
dynco-cpaas.dotdigital.com
r3-login.dotdigital.com
apps-cpaas.staging.dotdigital.com
apps-cpaas.staging.dotdigital.com
status.addresscloud.com
r3-app-stg.dotdigital.com
marketing.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
docs.cpaas.dotdigital.com
developer.dotdigital.com
cc3.status.jasper.com
endpointprotection.status.symantec.com
r1-login-stg.dotdigital.com
r1-admin.dotdigital.com
apps-cpaas.staging.dotdigital.com
cc3.status.jasper.com
status.ssactivewear.com
cc3.status.jasper.com
status.addresscloud.com
developer.dotdigital.com
r1-app.dotdigital.com
status.reliancenetwork.com
status.crewbuilder.ca
endpointprotection.status.symantec.com
r2-admin.dotdigital.com
support.dotdigital.com
email.dotdigital.com
r3-app.dotdigital.com
caloes-status.ravemobilesafety.com
status.c9cg.com
*.dotdigital.com
status-uk.highq.com
r1-admin.dotdigital.com
developer.dotdigital.com
apps-cpaas.staging.dotdigital.com
tickets.dotdigital.com
status.ssactivewear.com
learning.dotdigital.com
servicestation.dotdigital.com
marketing.dotdigital.com
menustatus.omnivore.io
dotdigital.com
mad-test.staging.dotdigital.com
systemstatus.rrc.ca
r3-app.dotdigital.com
r2-admin.dotdigital.com
status.crewbuilder.ca
dotdigital.com
status-uk.highq.com
status-uk.highq.com
login.dotdigital.com
login.dotdigital.com
status.reliancenetwork.com
status.atera.com
stg.dotdigitalstatus.com
status.hpiinc.com
*.dotdigital.com
servicestation.dotdigital.com
dynco-cpaas.staging.dotdigital.com
r2-login.dotdigital.com
status.digitary.net
developer.dotdigital.com
r1-app.dotdigital.com
cc3.status.jasper.com
r1-login.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
customersuccess.dotdigital.com
developer-cpaas.dotdigital.com
jose.dotdigital.com
*.dotdigital.com
endpointprotection.status.symantec.com
r3-login-stg.dotdigital.com
statusp.dotdigital.com
integrations.dotdigital.com
stg.dotdigitalstatus.com
status.atera.com
dotdigital.com
learning.dotdigital.com
www.dotdigital.com
statuspage.vantage.online
r3-login.dotdigital.com
docs.cpaas.dotdigital.com
customisations-cpaas.staging.dotdigital.com
developer.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
r1-login.dotdigital.com
cc3.status.jasper.com
apps-cpaas.staging.dotdigital.com
dotdigital.com
systemstatus.rrc.ca
apps-cpaas.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
email.dotdigital.com
*.thor.dotdigital.com
dynco-cpaas.staging.dotdigital.com
dynco-cpaas.dotdigital.com
r3-login.dotdigital.com
apps-cpaas.staging.dotdigital.com
apps-cpaas.staging.dotdigital.com
status.addresscloud.com
r3-app-stg.dotdigital.com
marketing.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
docs.cpaas.dotdigital.com
developer.dotdigital.com
cc3.status.jasper.com
endpointprotection.status.symantec.com
r1-login-stg.dotdigital.com
r1-admin.dotdigital.com
apps-cpaas.staging.dotdigital.com
cc3.status.jasper.com
status.ssactivewear.com
cc3.status.jasper.com
status.addresscloud.com
developer.dotdigital.com
r1-app.dotdigital.com
status.reliancenetwork.com
status.crewbuilder.ca
endpointprotection.status.symantec.com
r2-admin.dotdigital.com
support.dotdigital.com
email.dotdigital.com
r3-app.dotdigital.com
caloes-status.ravemobilesafety.com
status.c9cg.com
*.dotdigital.com
status-uk.highq.com
r1-admin.dotdigital.com
developer.dotdigital.com
apps-cpaas.staging.dotdigital.com
tickets.dotdigital.com
status.ssactivewear.com
learning.dotdigital.com
servicestation.dotdigital.com
marketing.dotdigital.com
menustatus.omnivore.io
dotdigital.com
mad-test.staging.dotdigital.com
systemstatus.rrc.ca
r3-app.dotdigital.com
r2-admin.dotdigital.com
status.crewbuilder.ca
dotdigital.com
status-uk.highq.com
status-uk.highq.com
login.dotdigital.com
login.dotdigital.com
status.reliancenetwork.com
status.atera.com
stg.dotdigitalstatus.com
Certificate
The complete raw certificate details for *.dotdigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIBTCCBu2gAwIBAgIMOTLCo9BQtyAoilMIMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMjA3MTgxMjU0MTNaFw0y MzA4MTkxMjU0MTJaMGkxCzAJBgNVBAYTAkdCMQ8wDQYDVQQIEwZMb25kb24xDzAN BgNVBAcTBkxvbmRvbjEdMBsGA1UEChMURE9URElHSVRBTCBHUk9VUCBQTEMxGTAX BgNVBAMMECouZG90ZGlnaXRhbC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQDaaHFrKX6snKSaE8JOsmIyUoxmVHf+N6ofhQdOs651tdzcTV1WUscM OrxYIqwG+C66Zl+HLiHS6Zf/GnKxU6jOKo+uOlQISOQ4uZVm1CwAg4e59UaE7uPe 6dtpWgjtVxNCribuWLQLnD45fX4C+boF5zJr5GCAIhMgZb38RJqwW1NVcBnK8Oka FXXFr0m0SnRPsmnkzJVTy08omNTGBFe9nG+IkDCz5zuNKttnNSEOcdAuZvHXlXtM qoUBs6aVT9tIwBLeBUXJgQm8GFeEKoQXnVf4Sovn+Lw1DMtcOUdvNiYeuB1Zjgwh FIRXwv+uwdzDMHl7ZJJLKxVikPP9tHiDeBvo/b86oJsQNAp0s97Y0Sn8wT/AwOsM iDwuryyUNONr5Lg1BhNvHE82NK/zNna0mIBygmrdor2hWd6WeSj7mcs4t17mAsDx WV0lwqzZUG2CNpYwW9zptwxELk5nJK4wdMxZCCxf0YwBkiBR3pFco1FES1ynTIwK x1N55LvXZjybGcLmjA99Yn30dNg6vhDNGbOoh7d4AdYBg1khQJ22NvBFoGmrsnyf 3MWLrJPJNj8kGEIfB7ZQXSfM5f8SBzvnRDCDLdvAB6C16hxnuvnpjQk1NoeGCweP J3FJ5L0G09+9b9/Scw9dVdcM9VNEd25fHRJBOLSIdyzBq5VFX3SiWwIDAQABo4ID xDCCA8AwDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUF BzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92 c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2ln bi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0 MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0 b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRw Oi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMIGXBgNV HREEgY8wgYyCECouZG90ZGlnaXRhbC5jb22CEGRvdGRpZ2l0YWwuY28udWuCDWRv dG1haWxlci5jb22CD2RvdG1haWxlci5jby51a4IRKi5kb3RtYWlsZXIuY28udWuC DyouZG90bWFpbGVyLmNvbYISKi5kb3RkaWdpdGFsLmNvLnVrgg5kb3RkaWdpdGFs LmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU +O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFEWVYBjcLgnIYO8ICIQBjuxM x1VnMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwDoPtDaPvUGNTLnVyi8iWvJ A9PL0RFr7Otp4Xd9bQa9bgAAAYIRX6HbAAAEAwBIMEYCIQCECTdI6lx0/ytZxTXW sSIEfrNPq+OnZojqXyJnWwCVLgIhAJRY6K8yflvV4ZFgis9Ssiw0xGMoRxCktAkc Xk7bQVDuAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAGCEV+d 0gAABAMARzBFAiEAmXmsleniVJHqc3VloBPo2g/hpw96BAI94u5fTsx05w0CIE7t PzyRgC2LEz4DGmfYSxV6r1VziTu9Wi7HywRWvoKkAHUAVYHUwhaQNgFK6gubVzxT 8MDkOHhwJQgXL6OqHQcT0wwAAAGCEV+ePwAABAMARjBEAiBEod31eLxkLtytlnnv o3O+1oBbGLnYEg1qrD9djfYWKgIgQNeCyqkALqrZ8oGhDiej2wQ3WewNjoEeQCiD +SasJfQwDQYJKoZIhvcNAQELBQADggEBAHaQ8md4C5BVlX859/SuxmvNHj8lrlbI ySDgEtQCrox0O538WoSOJm27wCj84FMYDdm0abB2eRQ0boyiq5fiPKdm771Ptqfj 3AgQ/XosX3am3eePvvW2c2Uo4BWLRWC1G147FZD6rN7aKfW+x+IwRDvOZCq0PoLg pU0zlj9BJF5BAhPp+RnFcbIcXtGRSsnILhEHdN4PwYK3gKTyK1D13nrCuPpGtT4u qn8nskd1jo+xfRmW/ZsIRpU+QdKP4XmEjHD8tS2amHfM8hpV25ecaiAs+asXX1wX 900i8ruCMC0yWomd2KxuhSPtYKNoJlK7eXIm5nykR72D4fG5FERKS/A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2mhxayl+rJykmhPCTrJi MlKMZlR3/jeqH4UHTrOudbXc3E1dVlLHDDq8WCKsBvguumZfhy4h0umX/xpysVOo ziqPrjpUCEjkOLmVZtQsAIOHufVGhO7j3unbaVoI7VcTQq4m7li0C5w+OX1+Avm6 Becya+RggCITIGW9/ESasFtTVXAZyvDpGhV1xa9JtEp0T7Jp5MyVU8tPKJjUxgRX vZxviJAws+c7jSrbZzUhDnHQLmbx15V7TKqFAbOmlU/bSMAS3gVFyYEJvBhXhCqE F51X+EqL5/i8NQzLXDlHbzYmHrgdWY4MIRSEV8L/rsHcwzB5e2SSSysVYpDz/bR4 g3gb6P2/OqCbEDQKdLPe2NEp/ME/wMDrDIg8Lq8slDTja+S4NQYTbxxPNjSv8zZ2 tJiAcoJq3aK9oVnelnko+5nLOLde5gLA8VldJcKs2VBtgjaWMFvc6bcMRC5OZySu MHTMWQgsX9GMAZIgUd6RXKNRREtcp0yMCsdTeeS712Y8mxnC5owPfWJ99HTYOr4Q zRmzqIe3eAHWAYNZIUCdtjbwRaBpq7J8n9zFi6yTyTY/JBhCHwe2UF0nzOX/Egc7 50Qwgy3bwAegteocZ7r56Y0JNTaHhgsHjydxSeS9BtPfvW/f0nMPXVXXDPVTRHdu Xx0SQTi0iHcswauVRV90olsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17702011011725060008649052936 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-18 12:54:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-19 12:54:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOTDIGITAL GROUP PLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dotdigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891026822587565173100117136388322520083374648541626799130936348571088712614923629476973587550147973566440479715763127157509612526659940611195998765503363276788177820026717734122453236739879109152103400279237499334465820851710614340819923906054972645828935651512728887748405844938547530158845957957500461673771464124833632573294618906767592748804857578166194778263520779851495978434749229358964599643053497546682090488072366600040493056320412324583132714877024018995437640265246602392911426662484139973470361506937313792200476616309930980434353897445640468830844030123237697858330587238071118394603330985640418067620113851910509167190126734438705307917430991958975713099058166020898726046824080414763761387854684536975029780246258549677686588046095796530034387417242851248906352864007191561749113546818432356411142744039435779664959130478028167524112042576861247277500481321454210835880504305831218924877739286303216403435104142369039104557746457912853465584215348834244778952565157962546940730459809171359956329776143352057765156004537624958535809915250362115213236506025437142545885083160896844236365688871323156853797174143222524930979792267486918726851993764175403654538038799140162509156893277104186800614805330579734148297302619 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmailer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmailer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotmailer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotmailer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45956018dc2e09c860ef080884018eec4cc75567 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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