comstice.aimia.com
- AIMIA CANADA INC -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 06:84:3a:d3:06:64:96:26:64:31:ca:9d:27:7c:1d:7f was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
AIMIA CANADA INC
Organization:
AIMIA CANADA INC
Organization unit: TC3
Organization unit: TC3
State / Province:
QC
Locality: Montreal
Country: CA
Locality: Montreal
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:84:3a:d3:06:64:96:26:64:31:ca:9d:27:7c:1d:7fSerial Number (int): 8661944258913906495106702087024287103
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f0:a2:36:fd:e5:34:2d:7b:44:84:10:ff:01:0e:f0:60:13:9e:2d:cb
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 02:52:b1:73:8b:c9:e5:5e:1b:40:98:69:75:8b:eb:a0:a5:37:8b:3a
Fingerprint (sha256): 07:3f:32:65:5c:1b:8d:c6:c6:6d:32:a6:06:0e:09:e7:1f:89:db:14:e1:16:32:0d:96:77:6b:ea:bb:1b:1d:05
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate comstice.aimia.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for comstice.aimia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
comstice.aimia.com
Other certificates including the domain name aimia.com
(limited to 100 certificates)
*.ca.aimia.com
showtimerewardscatalog.us.aimia.com
aimia.com
cds1.cvent.com
us.aimia.com
cds1.cvent.com
cds1.cvent.com
cds2.cvent.com
*.ca.aimia.com
cds2.cvent.com
cds1.cvent.com
aimialegal.one10marketing.com
cds1.cvent.com
comstice.aimia.com
view.uk.aimia.com
aimia.com
exl.demo.us.aimia.com
tmscatalog.us.aimia.com
services.us.aimia.com
*.aimia.com
cds2.cvent.com
cds1.cvent.com
privacy-ethics-security.aimia.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
cds2.cvent.com
nectarnetwork.aimia.com
webinfo.us.aimia.com
us.aimia.com
interactadminpreprod.ca-intranet.aimia.com
cds1.cvent.com
cds2.cvent.com
rewardsintegration.one10marketing.com
secure-ede.us.aimia.com
cds2.cvent.com
navistarbdc-qa.us.aimia.com
emmprodreporting.ca-intranet.aimia.com
news.aimia.com
dc.ca.aimia.com
cds2.cvent.com
cds2.cvent.com
*.aimia.com
cds1.cvent.com
belkincdwrepslne.us.aimia.com
cds1.cvent.com
*.tst.ca-intranet.aimia.com
cds2.cvent.com
us.aimia.com
brandsite.aimia.com
us.aimia.com
dc.ca.aimia.com
emmdev.ca-intranet.aimia.com
interactadminprod2.ca-intranet.aimia.com
aimialegal.one10marketing.com
fusionTVR-qaua.us.aimia.com
*.aimia.com
us.aimia.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
*.tst.ca-intranet.aimia.com
emmprod.ca-intranet.aimia.com
cds1.cvent.com
cds2.cvent.com
cds2.cvent.com
applause.us.aimia.com
cds1.cvent.com
cds1.cvent.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
us.aimia.com
*.us.aimia.com
cds1.cvent.com
themix.us.aimia.com
cds2.cvent.com
adfs.aimia.com
cds2.cvent.com
zoetis.us.aimia.com
interactadminprod1.ca-intranet.aimia.com
sharpcatalog.us.aimia.com
us.aimia.com
cds2.cvent.com
cds1.cvent.com
cds2.cvent.com
cds1.cvent.com
emmprod.ca-intranet.aimia.com
cds1.cvent.com
galcyyzibm001.ca.aimia.com
news.aimia.com
interactadmindev2.ca-intranet.aimia.com
cds1.cvent.com
powerofyou.us.aimia.com
cds1.cvent.com
emmdev.ca-intranet.aimia.com
us.aimia.com
cds1.cvent.com
vpn2.us.aimia.com
hadoop-atom.ca-intranet.aimia.com
showtimerewardscatalog.us.aimia.com
aimia.com
cds1.cvent.com
us.aimia.com
cds1.cvent.com
cds1.cvent.com
cds2.cvent.com
*.ca.aimia.com
cds2.cvent.com
cds1.cvent.com
aimialegal.one10marketing.com
cds1.cvent.com
comstice.aimia.com
view.uk.aimia.com
aimia.com
exl.demo.us.aimia.com
tmscatalog.us.aimia.com
services.us.aimia.com
*.aimia.com
cds2.cvent.com
cds1.cvent.com
privacy-ethics-security.aimia.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
cds2.cvent.com
nectarnetwork.aimia.com
webinfo.us.aimia.com
us.aimia.com
interactadminpreprod.ca-intranet.aimia.com
cds1.cvent.com
cds2.cvent.com
rewardsintegration.one10marketing.com
secure-ede.us.aimia.com
cds2.cvent.com
navistarbdc-qa.us.aimia.com
emmprodreporting.ca-intranet.aimia.com
news.aimia.com
dc.ca.aimia.com
cds2.cvent.com
cds2.cvent.com
*.aimia.com
cds1.cvent.com
belkincdwrepslne.us.aimia.com
cds1.cvent.com
*.tst.ca-intranet.aimia.com
cds2.cvent.com
us.aimia.com
brandsite.aimia.com
us.aimia.com
dc.ca.aimia.com
emmdev.ca-intranet.aimia.com
interactadminprod2.ca-intranet.aimia.com
aimialegal.one10marketing.com
fusionTVR-qaua.us.aimia.com
*.aimia.com
us.aimia.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
*.tst.ca-intranet.aimia.com
emmprod.ca-intranet.aimia.com
cds1.cvent.com
cds2.cvent.com
cds2.cvent.com
applause.us.aimia.com
cds1.cvent.com
cds1.cvent.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
us.aimia.com
*.us.aimia.com
cds1.cvent.com
themix.us.aimia.com
cds2.cvent.com
adfs.aimia.com
cds2.cvent.com
zoetis.us.aimia.com
interactadminprod1.ca-intranet.aimia.com
sharpcatalog.us.aimia.com
us.aimia.com
cds2.cvent.com
cds1.cvent.com
cds2.cvent.com
cds1.cvent.com
emmprod.ca-intranet.aimia.com
cds1.cvent.com
galcyyzibm001.ca.aimia.com
news.aimia.com
interactadmindev2.ca-intranet.aimia.com
cds1.cvent.com
powerofyou.us.aimia.com
cds1.cvent.com
emmdev.ca-intranet.aimia.com
us.aimia.com
cds1.cvent.com
vpn2.us.aimia.com
hadoop-atom.ca-intranet.aimia.com
Certificate
The complete raw certificate details for comstice.aimia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIQBoQ60wZkliZkMcqdJ3wdfzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMDIzMDAwMDAwWhcN MjAxMDI3MTIwMDAwWjBzMQswCQYDVQQGEwJDQTELMAkGA1UECBMCUUMxETAPBgNV BAcTCE1vbnRyZWFsMRkwFwYDVQQKExBBSU1JQSBDQU5BREEgSU5DMQwwCgYDVQQL EwNUQzMxGzAZBgNVBAMTEmNvbXN0aWNlLmFpbWlhLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANkQS1l0Zl7KQZu45a3zq38tbV015pk9iUdNm0IQ Z9cro/8Thr8NwpPO7trM9gyfMV0MAeMb6QbjVTF1ZeyM75qh2O9OmdwF8uSZ0Ijt LxJDtIRRS+Dgsn8yqn7YD+P7AAzEcmhe/v5r+SBx2oN0Qo9S4nbEREFs19jpBJ6g nUzcwUVO/1dE4Kac+bM9p3DyDSOO6eoP0jUIPMPyqDxjJNmwZh70wCJha20IvUu+ aqdtForBNwWeYyihh+tj7K4b6Dsttgb6ZOU38IYKi7O0QjtzJ7y4SRfmv9n0s0JF /uR/ZHkpKe7ee/3w5zsMVIYszzHuTL3M6pfzii5RZLMwZqUCAwEAAaOCAe4wggHq MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTwojb9 5TQte0SEEP8BDvBgE54tyzAdBgNVHREEFjAUghJjb21zdGljZS5haW1pYS5jb20w DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBr BgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1z aGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Et c2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcC ARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYB BQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20w RgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy dFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUcNnGvuD++TtwK64K79UMoP +i+4eKMezXRnlgfO8gZ9Skc24uT82inyZ4xaldSezAnHJEK86CXcF8z9zYgS29FG 0gYrZ8pshsn8RuDYJyxwl26AXJuzV+HsEWCIt/l83TWgGEw0GNa3ffAmfR7W0mNu k9Gd0ALo4ZWOpSnyFyT0PEeWeIEAy1Xuk3/SnCrK0FOQjZAJI26oboi922vVkKaM zZzPM5Ft7BJKQnwg/rFtuIfU297rgFE5JO/M6FTLTXqFsLaRrYP4S/TNK9ohv6AH OKE4XWDvBZ37t/5WHBAqNzGeTJu62S5LBDhlMDEP52tL5pwBaBriRLrsifUf8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RBLWXRmXspBm7jlrfOr fy1tXTXmmT2JR02bQhBn1yuj/xOGvw3Ck87u2sz2DJ8xXQwB4xvpBuNVMXVl7Izv mqHY706Z3AXy5JnQiO0vEkO0hFFL4OCyfzKqftgP4/sADMRyaF7+/mv5IHHag3RC j1LidsREQWzX2OkEnqCdTNzBRU7/V0Tgppz5sz2ncPINI47p6g/SNQg8w/KoPGMk 2bBmHvTAImFrbQi9S75qp20WisE3BZ5jKKGH62PsrhvoOy22Bvpk5TfwhgqLs7RC O3MnvLhJF+a/2fSzQkX+5H9keSkp7t57/fDnOwxUhizPMe5Mvczql/OKLlFkszBm pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8661944258913906495106702087024287103 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-27 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreal' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIMIA CANADA INC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC3' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comstice.aimia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27401747213062023286673029794642512648606276857380073290436544075882565169434167290784046986213277478037726956435669522273885274163518983176662966568877684316889741623054645800637146590170275598971276793724773863839176291806739048688811713212742640649523767420750524899511097173750730493613292065782566758914586283126854020892268343166939399548352012574026364166309451949057986514046002250269004557164905071655872496264610065495841592963608077017584978345903124680242905143669359961359335275268027950236923193102113397492953161067572265115098501483945140182131306871910982661922257400229631054154265704419619656197797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f0a236fde5342d7b448410ff010ef060139e2dcb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comstice.aimia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009d470d9c6bee0fef93b702bae0aefd50ca0ffa2fb878a31ecd74679607cef2067d4a4736e2e4fcda29f2678c5a95d49ecc09c72442bce825dc17ccfdcd8812dbd146d2062b67ca6c86c9fc46e0d8272c70976e805c9bb357e1ec116088b7f97cdd35a0184c3418d6b77df0267d1ed6d2636e93d19dd002e8e1958ea529f21724f43c4796788100cb55ee937fd29c2acad053908d9009236ea86e88bddb6bd590a68ccd9ccf33916dec124a427c20feb16db887d4dbdeeb80513924efcce854cb4d7a85b0b691ad83f84bf4cd2bda21bfa00738a1385d60ef059dfbb7fe561c102a37319e4c9bbad92e4b04386530310fe76b4be69c01681ae244baec89f51ff3