shop.activtrak.com
- Cloudflare, Inc. -
Issued by Cloudflare Inc RSA CA-2
About this certificate
This digital certificate with serial number 0d:43:9e:d0:85:5e:6a:dc:77:42:67:fb:a9:4b:b1:bb was issued on by Cloudflare, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Cloudflare, Inc.
Organization:
Cloudflare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
Cloudflare, Inc.
Organization:
Cloudflare, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:43:9e:d0:85:5e:6a:dc:77:42:67:fb:a9:4b:b1:bbSerial Number (int): 17631068976176569700777333211410444731
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0e:1e:6c:cd:cb:b1:23:53:7e:fb:92:d7:f3:90:af:a0:a5:90:6d:74
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a
Fingerprint (sha1): f7:cd:fd:4b:11:0b:21:87:b9:3a:af:a4:14:76:f1:f7:e9:fc:ed:9d
Fingerprint (sha256): 06:6c:80:ca:57:92:09:b6:e3:39:94:90:09:ad:66:cb:1b:23:b5:61:d8:39:00:ac:1c:58:ef:0a:72:7a:aa:cd
Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl
Check the revocation status for certificate shop.activtrak.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for shop.activtrak.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
shop.activtrak.com
Other certificates including the domain name activtrak.com
(limited to 100 certificates)
statuspage.io
statuspage.io
insights-ca.activtrak.com
ervaring.nedvice.nl
statuspage.io
statuspage.io
statuspage.io
insights-ca.activtrak.com
statuspage.io
statuspage.io
app.activtrak.com
support.activtrak.com
statuspage.io
statuspage.io
statuspage.io
status.activtrak.com
impactstatus.validic.com
app.activtrak.com
impactstatus.validic.com
statuspage.io
statuspage.io
statuspage.io
estado.medios.com.ar
statuspage.io
statuspage.io
statuspage.io
estado.medios.com.ar
test.activtrak.com
impactstatus.validic.com
insights-uk.activtrak.com
email.activtrak.com
impactstatus.validic.com
shop.activtrak.com
statuspage.io
statuspage.io
statuspage.io
dev-insights.activtrak.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
support.activtrak.com
upflow-email.activtrak.com
test.activtrak.com
impactstatus.validic.com
insights-uk.activtrak.com
statuspage.io
statuspage.io
support.activtrak.com
insights-uk.activtrak.com
estado.medios.com.ar
estado.medios.com.ar
statuspage.io
statuspage.io
statuspage.io
support.activtrak.com
estado.medios.com.ar
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.activtrak.com
statuspage.io
test.activtrak.com
statuspage.io
impactstatus.validic.com
support.activtrak.com
*.activtrak.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
activtrak.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
support.activtrak.com
statuspage.io
statuspage.io
email.activtrak.com
impactstatus.validic.com
shop.activtrak.com
statuspage.io
statuspage.io
ervaring.nedvice.nl
statuspage.io
app.activtrak.com
email.activtrak.com
statuspage.io
statuspage.io
statuspage.io
sni.cloudflaressl.com
statuspage.io
estado.medios.com.ar
upflow-email.activtrak.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
insights-ca.activtrak.com
ervaring.nedvice.nl
statuspage.io
statuspage.io
statuspage.io
insights-ca.activtrak.com
statuspage.io
statuspage.io
app.activtrak.com
support.activtrak.com
statuspage.io
statuspage.io
statuspage.io
status.activtrak.com
impactstatus.validic.com
app.activtrak.com
impactstatus.validic.com
statuspage.io
statuspage.io
statuspage.io
estado.medios.com.ar
statuspage.io
statuspage.io
statuspage.io
estado.medios.com.ar
test.activtrak.com
impactstatus.validic.com
insights-uk.activtrak.com
email.activtrak.com
impactstatus.validic.com
shop.activtrak.com
statuspage.io
statuspage.io
statuspage.io
dev-insights.activtrak.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
support.activtrak.com
upflow-email.activtrak.com
test.activtrak.com
impactstatus.validic.com
insights-uk.activtrak.com
statuspage.io
statuspage.io
support.activtrak.com
insights-uk.activtrak.com
estado.medios.com.ar
estado.medios.com.ar
statuspage.io
statuspage.io
statuspage.io
support.activtrak.com
estado.medios.com.ar
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.activtrak.com
statuspage.io
test.activtrak.com
statuspage.io
impactstatus.validic.com
support.activtrak.com
*.activtrak.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
activtrak.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
support.activtrak.com
statuspage.io
statuspage.io
email.activtrak.com
impactstatus.validic.com
shop.activtrak.com
statuspage.io
statuspage.io
ervaring.nedvice.nl
statuspage.io
app.activtrak.com
email.activtrak.com
statuspage.io
statuspage.io
statuspage.io
sni.cloudflaressl.com
statuspage.io
estado.medios.com.ar
upflow-email.activtrak.com
statuspage.io
statuspage.io
statuspage.io
Certificate
The complete raw certificate details for shop.activtrak.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIQDUOe0IVeatx3Qmf7qUuxuzANBgkqhkiG9w0BAQsFADBK MQswCQYDVQQGEwJVUzEZMBcGA1UEChMQQ2xvdWRmbGFyZSwgSW5jLjEgMB4GA1UE AxMXQ2xvdWRmbGFyZSBJbmMgUlNBIENBLTIwHhcNMjAwNzExMDAwMDAwWhcNMjEw NzExMTIwMDAwWjBqMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcT DVNhbiBGcmFuY2lzY28xGTAXBgNVBAoTEENsb3VkZmxhcmUsIEluYy4xGzAZBgNV BAMTEnNob3AuYWN0aXZ0cmFrLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAOTeJvzrlHjMpBjkL3mfeMBbPQisaS+H5yTp+Ma6geaSri3RUW9Ln26W cPObLXlxaugvCtTcZ5ZTaEE+VE8H66uHl+5MpPxYim4UKdBeqZxrQunDV5hqgjEE 9GkTtDnixc+6Vl4Qs3hEEasnwH4xQTHBeGRvPBbjhguMMYiISuq9QVyYddZ+kNfG +MAnXs3wf38i9edcnEcSoBf+pFqnkyFu9luurWRL4dttuUVxdeVSUObFctjOMwsA uClXBkopNJVZk9WHTfZIeGDvg17d+c8GXK5VyOPC3UfKvNjmiGIP3eSgoXSFaWeo vg6dinkEKD89xWQ2krbgbRqSjynhpfMCAwEAAaOCAfgwggH0MB8GA1UdIwQYMBaA FBipGvyyRUnBbzA0CCvZh5ywJVd6MB0GA1UdDgQWBBQOHmzNy7EjU377ktfzkK+g pZBtdDAdBgNVHREEFjAUghJzaG9wLmFjdGl2dHJhay5jb20wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB7BgNVHR8EdDByMDeg NaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vQ2xvdWRmbGFyZUluY1JTQUNB LTIuY3JsMDegNaAzhjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vQ2xvdWRmbGFy ZUluY1JTQUNBLTIuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHYG CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu Y29tMEAGCCsGAQUFBzAChjRodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vQ2xv dWRmbGFyZUluY1JTQUNBLTIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADbP2TmqQOUE8B9Slr9EFl3zjEg7 hji5poB7M2uTzkq8ykrdsF6sFzUQXKXD+g6T6ZcMQJKHlXnusE2fLI23EABS5EmK S8yxgECiSjr+NhdBl8HVo2agMzKaF+TmTSKhjT6N0UNrwergvlk4BglOjIWN0u3E 3OMrR71dMnbguIZCnqpIWSS45wyyFMCYAIMDiTqIYfYAApFGKHvNsoctnK43Lh94 NkPdmJtUsj5wZjDlHfkzn3XGeHkWH5F0+vW+Sygyz2ICTXhT6eomDBCIgnCslk1j 1uIpB4rw/xbZgw5VnlM9Qprn40xBnF6mZPGFz94tax/Pa1PCIxGDEzxuKrE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N4m/OuUeMykGOQveZ94 wFs9CKxpL4fnJOn4xrqB5pKuLdFRb0ufbpZw85steXFq6C8K1NxnllNoQT5UTwfr q4eX7kyk/FiKbhQp0F6pnGtC6cNXmGqCMQT0aRO0OeLFz7pWXhCzeEQRqyfAfjFB McF4ZG88FuOGC4wxiIhK6r1BXJh11n6Q18b4wCdezfB/fyL151ycRxKgF/6kWqeT IW72W66tZEvh2225RXF15VJQ5sVy2M4zCwC4KVcGSik0lVmT1YdN9kh4YO+DXt35 zwZcrlXI48LdR8q82OaIYg/d5KChdIVpZ6i+Dp2KeQQoPz3FZDaStuBtGpKPKeGl 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17631068976176569700777333211410444731 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.activtrak.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28891880912678779615453603894554813485693525568735730585173914384272558135042693217358163314484300991077389592609045405124188210345519720956177891965000786750590420764351402926218180700150328562910739627977820889780123374743517675717288179038140954268732115362456502327682896410710199611856170513974719634806709917858795738895181051057293730251469317971553670871365966761364670318093199800108868618733791688687773121528720507824405235030097579939604062277002742442709096799347031940853685034282529137437506275775749937577169788584792931940495520879080538034164318804462916020993247045539190929532119559135101274138099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0e1e6ccdcbb123537efb92d7f390afa0a5906d74 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.activtrak.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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