somni.avg.com
- Adobe Systems Incorporated -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0e:ca:b7:c2:32:47:25:14:6e:50:0e:2f:3e:c6:f9:3b was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Adobe Systems Incorporated
Organization:
Adobe Systems Incorporated
State / Province:
California
Locality: San Jose
Country: US
Locality: San Jose
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:ca:b7:c2:32:47:25:14:6e:50:0e:2f:3e:c6:f9:3bSerial Number (int): 19661762973194112753289043294034524475
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 7e:a5:e1:36:8e:43:b9:7e:36:b7:7e:57:3d:9a:2b:55:df:88:bd:19
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 83:be:6a:45:66:18:c3:12:52:31:6b:c9:86:59:9f:ae:f8:60:35:dd
Fingerprint (sha256): 07:16:80:a4:5b:5f:b4:40:8e:6a:44:20:5c:6b:56:cb:b0:47:9d:b3:20:21:7d:60:cb:2e:5c:bb:64:88:d8:f4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate somni.avg.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for somni.avg.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
somni.avg.com
Other certificates including the domain name avg.com
(limited to 100 certificates)
business-auth.dev-europe-west3.smbrm.avast.com
*.avg.com
estatus.facturame.mx
release-notes.avg.com
bsmtp-relay-prod-dmz-brq001.mgm.avg.com
*.avg.com
study.cz.avg.com
estatus.facturame.mx
ua-cloud-stage.avg.com
buy-qa4.norton.com
webtuneup.avg.com
*.avg.com
dls.norton.com
click.emails.avg.com
*.avg.com
partners-int.norton.com
san.avg.com
cloudcare-billing.avg.com
ua-cloud-test.avg.com
san-ion.avast.com
*.avg.com
estatus.facturame.mx
ks.norton.com
web.backup.norton.com
*.avg.com
*.avg.com
shop.avg.com
subscriptions-test.avast.com
bconsole-test.avg.com
*.ocm.avg.com
partners.avg.com
*.avg.com
san.avg.com
estatus.facturame.mx
xls-int.norton.com
*.cloudcare.avg.com
somni.avg.com
san-ion.avast.com
*.my.sso.avg.com
*.avg.com
renewus.avg.com
*.avg.com
somni.avg.com
*.avg.com
*.avg.com
tps.avg.com
ua-cloud.avg.com
*.cloudcare.avg.com
signal.avg.com
labs.avg.com
*.avg.com
my-web-test.avast.com
estatus.facturame.mx
study.avg.com
*.avg.com
estatus.facturame.mx
stage-signal.avg.com
*.update.avg.com
avg.com
business-auth.prod.smbrm.avast.com
www9.avg.com
*.avg.com
support.avg.com
sip-01.avg.com
estatus.facturame.mx
study.avg.com
ccrmm.avg.com
estatus.facturame.mx
estatus.facturame.mx
my-web-stage.avast.com
san.avg.com
id.avast.com
estatus.facturame.mx
ks-int2.norton.com
*.cloud.avg.com
integrationbugs.avg.com
mts.norton.com
vpnportal.avg.com
zas-api.avg.com
community.cloudcare.avg.com
support.avg.com
*.avg.com
ncs-spoc-int1.norton.com
*.ccrmm.avg.com
*.avg.com
platformdashboard.avg.com
whatsmyip.mw-rmm.barracudamsp.com
*.avg.com
shop.avg.com
us03.ccrmm.avg.com
activation.avast.com
akamai-san46.exacttarget.com
sni.cloudflaressl.com
*.download.avg.com
san.avast.com
*.avg.com
status.cloudcare.avg.com
share.avg.com
estatus.facturame.mx
vpn.avg.com
*.avg.com
estatus.facturame.mx
release-notes.avg.com
bsmtp-relay-prod-dmz-brq001.mgm.avg.com
*.avg.com
study.cz.avg.com
estatus.facturame.mx
ua-cloud-stage.avg.com
buy-qa4.norton.com
webtuneup.avg.com
*.avg.com
dls.norton.com
click.emails.avg.com
*.avg.com
partners-int.norton.com
san.avg.com
cloudcare-billing.avg.com
ua-cloud-test.avg.com
san-ion.avast.com
*.avg.com
estatus.facturame.mx
ks.norton.com
web.backup.norton.com
*.avg.com
*.avg.com
shop.avg.com
subscriptions-test.avast.com
bconsole-test.avg.com
*.ocm.avg.com
partners.avg.com
*.avg.com
san.avg.com
estatus.facturame.mx
xls-int.norton.com
*.cloudcare.avg.com
somni.avg.com
san-ion.avast.com
*.my.sso.avg.com
*.avg.com
renewus.avg.com
*.avg.com
somni.avg.com
*.avg.com
*.avg.com
tps.avg.com
ua-cloud.avg.com
*.cloudcare.avg.com
signal.avg.com
labs.avg.com
*.avg.com
my-web-test.avast.com
estatus.facturame.mx
study.avg.com
*.avg.com
estatus.facturame.mx
stage-signal.avg.com
*.update.avg.com
avg.com
business-auth.prod.smbrm.avast.com
www9.avg.com
*.avg.com
support.avg.com
sip-01.avg.com
estatus.facturame.mx
study.avg.com
ccrmm.avg.com
estatus.facturame.mx
estatus.facturame.mx
my-web-stage.avast.com
san.avg.com
id.avast.com
estatus.facturame.mx
ks-int2.norton.com
*.cloud.avg.com
integrationbugs.avg.com
mts.norton.com
vpnportal.avg.com
zas-api.avg.com
community.cloudcare.avg.com
support.avg.com
*.avg.com
ncs-spoc-int1.norton.com
*.ccrmm.avg.com
*.avg.com
platformdashboard.avg.com
whatsmyip.mw-rmm.barracudamsp.com
*.avg.com
shop.avg.com
us03.ccrmm.avg.com
activation.avast.com
akamai-san46.exacttarget.com
sni.cloudflaressl.com
*.download.avg.com
san.avast.com
*.avg.com
status.cloudcare.avg.com
share.avg.com
estatus.facturame.mx
vpn.avg.com
Certificate
The complete raw certificate details for somni.avg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHvzCCBqegAwIBAgIQDsq3wjJHJRRuUA4vPsb5OzANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTEwMjIwMDAwMDBa Fw0yMjExMjIyMzU5NTlaMHIxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y bmlhMREwDwYDVQQHEwhTYW4gSm9zZTEjMCEGA1UEChMaQWRvYmUgU3lzdGVtcyBJ bmNvcnBvcmF0ZWQxFjAUBgNVBAMTDXNvbW5pLmF2Zy5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDOSmTYv2t3Lf0EDUz54BUeeqwGETE4nQEq4KS0 4Xai/4m9RGP68XchPSMz/EuR1/RNPBBXNucXjUe8Oz9nfuL9D5Jlk/nC0vwQfn3V Bo2cphNqLodYzfwDeJAof24Haerr2T54STDaiiXUuV+ao/r32lfnDW7Lrp+E5R38 sKhLB5TuUtKjzhJFUo8xDbLLEaXKGGJTVdgV/mJ6yJdoC/6takfu9gP7/pifdCB5 x3lTmseuYhuILOA4dqiCUCP7sgr2hq5BumKWW0w3/ajVPcgh2u6W1mNcc12Yd3Va mKcJpzQ00Rkur2ePmIUuQSI94mBuIObIOuE9RUF2YTJwWBTHdkHPjTUcWVPc0EMC UZbf6uwSVierKt+c44CaCHtKigPsABKJO2eDKSBQy9kb3tvWcF6eQSCItzhsrumI 1N6iq5DDG9gOE5i26fHFEiTTehS7ybb20iCrr8Sqxin11taEmAabSPU0q+9mpdQU YtfeHKHhPNtbQJg+eDFJEn+S5Wh7hHV/J+W/saCzt5RDr86Nxasfm8e/Y57njCyi W24VU0rxtQ5msHrALkoO6TeVJpFIPMQaQCPCfboKW6gwjhDOl02YwqC9yPH1APQF QqwBnx34YMTPfwknZVbBdQNKd1yelSb/rm4AtTFJ91yH+qx3Yr2416xfOmWVKQC7 Je4CYwIDAQABo4IDcjCCA24wHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2 ufQwHQYDVR0OBBYEFH6l4TaOQ7l+Nrd+Vz2aK1XfiL0ZMBgGA1UdEQQRMA+CDXNv bW5pLmF2Zy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdp Y2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8 hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYy MDIwQ0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYI KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9 aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2 MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAE ggFsAWoAdwApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3HhAAAAXyqUMH0 AAAEAwBIMEYCIQCZtuk0rB7ddfhu2Z3U9JB1/13gMep590+5UV+VLqtQMwIhAK3A eQjdEIv0SdWtlTrqASA2jmatzG/CBiW0oST0e2O0AHcAUaOw9f0BeZxWbbg3eI8M pHrMGyfL956IQpoN/tSLBeUAAAF8qlDCQQAABAMASDBGAiEAk8TbunRnpvG4fcdf jxNj9dAgA/TuFRmpb5n3RuRdjg0CIQDKHf/F8ipgb4vzOoG7KGN4YhrQDTipM5D5 sPHVfG2TPwB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABfKpQ wb8AAAQDAEcwRQIhALbFwUOWh/Qa9yGW2SNacWs7g5GXlbnNSTvGlRtU+2o9AiBP IdjmCmsrENNWwFfewcBP+HjXxHmFtNBhJmrp4v+OxjANBgkqhkiG9w0BAQsFAAOC AQEAPxmvKe4QfzG/rFPiDzfTjK/XwMNJ9bF7JnTK5GZdGmbWI1Runard7FCHAT7l SKAozf+Pr1Kehb16CxVIg0ZIyKKymJobvZAaHyr2voeSOc0RsdVmeTB+bbNI6VGq doSRV7WWA9fGHEvddcyjOECyJw7SJhmgJzMAxWIkLEMkYZfyg5LL+ZNP8oWQ2f+0 DmeUjn7Gw+8CjsTPDJHO3S0Utp7WUC1hHXGwSEbHzyc9AiSCa9+mrc5okfCesfRC KD3uM2AT0Y3A5vHliJrX83jtGBuCcAwctIKF0gRbo0/p2v7xFF0efIuls2egV31h dll/eQ0sZr3kh0+jvSJLI56meA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzkpk2L9rdy39BA1M+eAV HnqsBhExOJ0BKuCktOF2ov+JvURj+vF3IT0jM/xLkdf0TTwQVzbnF41HvDs/Z37i /Q+SZZP5wtL8EH591QaNnKYTai6HWM38A3iQKH9uB2nq69k+eEkw2ool1LlfmqP6 99pX5w1uy66fhOUd/LCoSweU7lLSo84SRVKPMQ2yyxGlyhhiU1XYFf5iesiXaAv+ rWpH7vYD+/6Yn3Qgecd5U5rHrmIbiCzgOHaoglAj+7IK9oauQbpilltMN/2o1T3I IdrultZjXHNdmHd1WpinCac0NNEZLq9nj5iFLkEiPeJgbiDmyDrhPUVBdmEycFgU x3ZBz401HFlT3NBDAlGW3+rsElYnqyrfnOOAmgh7SooD7AASiTtngykgUMvZG97b 1nBenkEgiLc4bK7piNTeoquQwxvYDhOYtunxxRIk03oUu8m29tIgq6/EqsYp9dbW hJgGm0j1NKvvZqXUFGLX3hyh4TzbW0CYPngxSRJ/kuVoe4R1fyflv7Ggs7eUQ6/O jcWrH5vHv2Oe54wsoltuFVNK8bUOZrB6wC5KDuk3lSaRSDzEGkAjwn26CluoMI4Q zpdNmMKgvcjx9QD0BUKsAZ8d+GDEz38JJ2VWwXUDSndcnpUm/65uALUxSfdch/qs d2K9uNesXzpllSkAuyXuAmMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19661762973194112753289043294034524475 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Systems Incorporated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somni.avg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841592227874008667354129749398135045881102411457007137586611266316564483875332117179808307614673245006809333153447703683853384682490406478787353740489476608931533016701352026810398150393915536622133444542475540391975277442006440033462723033301201724130335756734856125771550072031853593167209211196365049184302268647023231781229482816089351926933218009246965496103220177554522547149505904862457496163689055195339685487215895218529675185724662101523517047524367537364037004199926932220159678756379800761317717144398020752689562783695257774509031476951609528835891768191854144109879884571002410982061313445195026935084203386128954805282277296781212162024325436596535143087149512174058327852233627885507423454803183530036092614126115841721465065877826450822613802861804840455427828818550344286092655897554735224605662944112807977020950497652422739692536245901116990798310816637921391273516639822079481300176976563088395618483041448719562978307709119212504833843455339075251839761916047037705811336958608442167233505380876000596832326640673876988074703562599452477608746030616575897894091041866365658237774686375839120559892730053278423168082370481283704170807413863384039001551921813342189613992594580189169184281720655094494971378401891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7ea5e1368e43b97e36b77e573d9a2b55df88bd19 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somni.avg.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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