ccasorigist.saifg.rbc.com
- Royal Bank of Canada -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 0e:d8:87:4d:a2:80:56:8e:34:4c:2b:16:dd:a6:3c:8a was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Royal Bank of Canada
Organization:
Royal Bank of Canada
Organization unit: Credit Card Adjudication Services
Organization unit: Credit Card Adjudication Services
State / Province:
Ontario
Locality: Toronto
Country: CA
Locality: Toronto
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:d8:87:4d:a2:80:56:8e:34:4c:2b:16:dd:a6:3c:8aSerial Number (int): 19733472338589074404969306922275978378
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 95:32:3f:d7:01:da:78:ed:ad:13:f1:15:e0:f3:3e:e8:1a:5f:e0:9f
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): aa:37:8d:1d:eb:00:61:18:2c:1d:e3:fc:6f:a2:b0:89:54:16:a5:60
Fingerprint (sha256): 07:92:57:af:fc:2d:9d:af:92:63:ea:f0:52:e4:76:70:8a:d2:a2:ee:59:d8:1e:30:0a:e7:a3:70:64:00:aa:2d
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate ccasorigist.saifg.rbc.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ccasorigist.saifg.rbc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ccasorigist.saifg.rbc.com
Other certificates including the domain name rbc.com
(limited to 100 certificates)
ulvzsid02.devfg.rbc.com
wss1.fg.rbc.com
databasetestaugust9.fg.rbc.com
rbcroyalbank.com
LYNC2013DEV1.DEVFG.RBC.COM
invest-cloud.apps.ocp.devfg.rbc.com
rbcroyalbank.com
tormqqv2.devfg.rbc.com
www.fg.rbc.com
offerapi.rbc.com
b2bkeyadmin.rbc.com
92VFQY.00000.SP.702.rbc.com
cmlfm.rbc.com
mobileas.rbc.com
rbccm.com
Syndtrakclient.rbc.com
tdmc9mp08.fg.rbc.com
cobgrid1.rbc.com
cpvip.leoguest.fg.rbc.com
b2bfiletransferadmin.rbc.com
lfm.symcor.eb.rbc.com
san-6-s10.tlsprovisioning.exacttarget.com
webftm.rbc.com
G6CADL.00111.BR.344.rbc.com
km-ceptest.rbc.com
TTLA.saifg.rbc.com
vbond-35d58bf4-5cee-4f81-8fac-edf2d05dff19-0.rbc.com
p9gcchmc01.fg.rbc.com
vanity21.jiveon.com
txpr.fg.rbc.com
tdmbrtp76.fg.rbc.com
fssreconcb.fg.rbc.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
isynd.fg.rbc.com
G6CADL.00022.BR.756.rbc.com
sa-test.devfg.rbc.com
cmapps.fg.rbc.com
bourses.rbc.com
iservices.rbc.com
ftpssl.rbc.com
tw00.pcf.fg.rbc.com
scholarships.rbc.com
newtonuat.saifg.rbc.com
YZT0USBankFISTest.fg.rbc.com
zfp0saiusclientsource.saititanium.saidf.saifg.rbc.com
G6CADL.00026.ME.344.rbc.com
san-12-s10.tlsprovisioning.exacttarget.com
mwalletroot.saifg.rbc.com
autodiscover.rbc.com
vipexperience.rbc.com
se114556.devmaple.devfg.rbc.com
implementationtestpiv22.fg.rbc.com
view.rbcgam.rbc.com
wasisto.fg.rbc.com
rbcroyalbank.com
ulvzsid04.devfg.rbc.com
G6CADL.00022.BR.756.rbc.com
b2bkeyadmin.rbc.com
IS12R311.SAIFG.RBC.COM
uarcwbd01.devfg.rbc.com
silver.rbcroyalbank.com
rbcroyalbank.com
ul90.devfg.rbc.com
mobile.rbcroyalbank.com
fcda.devfg.rbc.com
pegauswm.fg.rbc.com
greetings.rbc.com
cache.rbc.com
view.invsecuredocs.rbc.com
xxv0prod.fg.rbc.com
offer.rbc.com
akamaisecure4.qualtrics.com
CMENTCOI.SAIFG.RBC.COM
iso.portfolioaccounting.sterbc.com
proco.devfg.rbc.com
cdgcc.fg.rbc.com
secureft.rbc.com
silver.rbcroyalbank.com
web.rbc.com
exvgroup.rbc.com
ZTK0AutoToolPreProd.rbc.com
desyspro.rbc.com
ccasorigist.saifg.rbc.com
wss-qa.devfg.rbc.com
documents.rbc.com
online.rbc.com
notreimpact.rbc.com
vlh0wmbperf-https2gw.saifg.rbc.com
p3mthin1.occ.fg.rbc.com
qa-intonline.saifg.rbc.com
uak0-ccia.saifg.rbc.com
xxv0test.devfg.rbc.com
ofi-metabase.ampli.ca
SymantecTestAugust2TEST2.fg.rbc.com
p3mrbi2.occ.fg.rbc.com
account-b-nonprod.rbcventures.ca
akamai-san135.exacttarget.com
uaesswp10.fg.rbc.com
san-12-s10.tlsprovisioning.exacttarget.com
wss1.fg.rbc.com
databasetestaugust9.fg.rbc.com
rbcroyalbank.com
LYNC2013DEV1.DEVFG.RBC.COM
invest-cloud.apps.ocp.devfg.rbc.com
rbcroyalbank.com
tormqqv2.devfg.rbc.com
www.fg.rbc.com
offerapi.rbc.com
b2bkeyadmin.rbc.com
92VFQY.00000.SP.702.rbc.com
cmlfm.rbc.com
mobileas.rbc.com
rbccm.com
Syndtrakclient.rbc.com
tdmc9mp08.fg.rbc.com
cobgrid1.rbc.com
cpvip.leoguest.fg.rbc.com
b2bfiletransferadmin.rbc.com
lfm.symcor.eb.rbc.com
san-6-s10.tlsprovisioning.exacttarget.com
webftm.rbc.com
G6CADL.00111.BR.344.rbc.com
km-ceptest.rbc.com
TTLA.saifg.rbc.com
vbond-35d58bf4-5cee-4f81-8fac-edf2d05dff19-0.rbc.com
p9gcchmc01.fg.rbc.com
vanity21.jiveon.com
txpr.fg.rbc.com
tdmbrtp76.fg.rbc.com
fssreconcb.fg.rbc.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
isynd.fg.rbc.com
G6CADL.00022.BR.756.rbc.com
sa-test.devfg.rbc.com
cmapps.fg.rbc.com
bourses.rbc.com
iservices.rbc.com
ftpssl.rbc.com
tw00.pcf.fg.rbc.com
scholarships.rbc.com
newtonuat.saifg.rbc.com
YZT0USBankFISTest.fg.rbc.com
zfp0saiusclientsource.saititanium.saidf.saifg.rbc.com
G6CADL.00026.ME.344.rbc.com
san-12-s10.tlsprovisioning.exacttarget.com
mwalletroot.saifg.rbc.com
autodiscover.rbc.com
vipexperience.rbc.com
se114556.devmaple.devfg.rbc.com
implementationtestpiv22.fg.rbc.com
view.rbcgam.rbc.com
wasisto.fg.rbc.com
rbcroyalbank.com
ulvzsid04.devfg.rbc.com
G6CADL.00022.BR.756.rbc.com
b2bkeyadmin.rbc.com
IS12R311.SAIFG.RBC.COM
uarcwbd01.devfg.rbc.com
silver.rbcroyalbank.com
rbcroyalbank.com
ul90.devfg.rbc.com
mobile.rbcroyalbank.com
fcda.devfg.rbc.com
pegauswm.fg.rbc.com
greetings.rbc.com
cache.rbc.com
view.invsecuredocs.rbc.com
xxv0prod.fg.rbc.com
offer.rbc.com
akamaisecure4.qualtrics.com
CMENTCOI.SAIFG.RBC.COM
iso.portfolioaccounting.sterbc.com
proco.devfg.rbc.com
cdgcc.fg.rbc.com
secureft.rbc.com
silver.rbcroyalbank.com
web.rbc.com
exvgroup.rbc.com
ZTK0AutoToolPreProd.rbc.com
desyspro.rbc.com
ccasorigist.saifg.rbc.com
wss-qa.devfg.rbc.com
documents.rbc.com
online.rbc.com
notreimpact.rbc.com
vlh0wmbperf-https2gw.saifg.rbc.com
p3mthin1.occ.fg.rbc.com
qa-intonline.saifg.rbc.com
uak0-ccia.saifg.rbc.com
xxv0test.devfg.rbc.com
ofi-metabase.ampli.ca
SymantecTestAugust2TEST2.fg.rbc.com
p3mrbi2.occ.fg.rbc.com
account-b-nonprod.rbcventures.ca
akamai-san135.exacttarget.com
uaesswp10.fg.rbc.com
san-12-s10.tlsprovisioning.exacttarget.com
Certificate
The complete raw certificate details for ccasorigist.saifg.rbc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIQDtiHTaKAVo40TCsW3aY8ijANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwMTMwMDAwMDAwWhcNMjEwMTMwMTIw MDAwWjCBoDELMAkGA1UEBhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xEDAOBgNVBAcT B1Rvcm9udG8xHTAbBgNVBAoTFFJveWFsIEJhbmsgb2YgQ2FuYWRhMSowKAYDVQQL EyFDcmVkaXQgQ2FyZCBBZGp1ZGljYXRpb24gU2VydmljZXMxIjAgBgNVBAMTGWNj YXNvcmlnaXN0LnNhaWZnLnJiYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDeVSlvKOYN5rV9vyYWVsdqQW6MqwvLRkd84yqhQAmDjv2NYn0nlyGC YLbi06Mg9PI8IAktwohGxELC8awaDhe+g+GhuD8pMCluI2uF3s4UujdscC/Ib/1Q xK7bCTOZv7BRO7exRiPjfqd+VmZynO8r4ctJpQDrx365amNWpKkCgfCKr1TnDuqw a50N4vSDG34okLa3qiK/knkDk05lb2uPsikfOuTlqGrw1/4HL9cJ0HK2oeBzLj2o n8EOYGBt1ou+hp4PoTozMcm7NKEIxR6Tcc0PvXReUMJANPo627UyZe11RhMT3Jzn wYmJZ83KdICYjUhYPT8ZjdWH5eOtLkOdAgMBAAGjggH2MIIB8jAfBgNVHSMEGDAW gBQkbist0GqSUVElaQGqmkemiedAIDAdBgNVHQ4EFgQUlTI/1wHaeO2tE/EV4PM+ 6Bpf4J8wJAYDVR0RBB0wG4IZY2Nhc29yaWdpc3Quc2FpZmcucmJjLmNvbTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHcGA1Ud HwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds b2JhbENBRzIuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGln aUNlcnRHbG9iYWxDQUcyLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgG CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC AjB0BggrBgEFBQcBAQRoMGYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj ZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIaBGzF0XkbPx5yOtW2fsVnHHq8n n3kvkEHUm53e55PoZl18kYxtBwlOWK1muhQV0ln4xbd0nafzYDaJxyGJH6XbaGg8 nipTWcsxB/GYLe44dVeedC724blgZBHAZZZzEdoo7E7Ek+29MSVFmchoPvokU91I RWyYm7mcDLyduFQwZd+wsDJ5/KI5qewXED0ODmv8vSsg8+CzuWX7i32wgyJVypYl oYE2juzH885eZlckhCFxkeZgO4yyJZiJB3f160UDCmPpmhx4XiXtP8vdjHU5GiAO V335sheAQI4swfmEhye84w6pzGECpInZRSaAAAPO7P7Tw3pti0UZX27HtA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lUpbyjmDea1fb8mFlbH akFujKsLy0ZHfOMqoUAJg479jWJ9J5chgmC24tOjIPTyPCAJLcKIRsRCwvGsGg4X voPhobg/KTApbiNrhd7OFLo3bHAvyG/9UMSu2wkzmb+wUTu3sUYj436nflZmcpzv K+HLSaUA68d+uWpjVqSpAoHwiq9U5w7qsGudDeL0gxt+KJC2t6oiv5J5A5NOZW9r j7IpHzrk5ahq8Nf+By/XCdBytqHgcy49qJ/BDmBgbdaLvoaeD6E6MzHJuzShCMUe k3HND710XlDCQDT6Otu1MmXtdUYTE9yc58GJiWfNynSAmI1IWD0/GY3Vh+XjrS5D nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19733472338589074404969306922275978378 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal Bank of Canada' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Credit Card Adjudication Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ccasorigist.saifg.rbc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28066898577060440363000674975518781638240396913565196797870319441013636993585461129374178835986142012130562034530857121106073872057118464865087482830815712056455147660457686464852342409119003994080340755541146121069846751135527977325033940739134756725474093858645671896413204856432013002201982287301666356096718083770222385019475215954446475151782717093819060209032909577125187094189368729369658979949129435432939958968758638665398582586325032201141312833362211058650172403917092722218109864129004543302392032627033616536327357616088647793782014109667468137391338300525433742971061279914898705646348495039440897328029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 95323fd701da78edad13f115e0f33ee81a5fe09f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccasorigist.saifg.rbc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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