arcus-www.amazon.com.au
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 07:64:55:95:35:43:56:e9:54:d5:23:73:05:f0:35:40 was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=arcus-www.amazon.com.au
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:64:55:95:35:43:56:e9:54:d5:23:73:05:f0:35:40Serial Number (int): 9825561482644532868719231816378103104
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ea:ec:e5:64:64:7a:e5:5e:03:fb:42:ad:41:88:e5:96:86:36:3b:3e
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): 13:2a:54:01:c2:bc:99:70:c9:15:60:85:5a:97:aa:44:0a:a3:7c:64
Fingerprint (sha256): 08:1e:04:dc:47:6a:3a:76:c6:d0:9b:25:ee:62:8b:4d:ac:a1:e6:d8:66:04:82:c8:b0:f4:cd:eb:a2:22:84:98
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate arcus-www.amazon.com.au
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for arcus-www.amazon.com.au
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arcus-www.amazon.com.au
www.amazon.com.au
p-nt-www-amazon-com-au-kalias.amazon.com.au
p-yo-www-amazon-com-au-kalias.amazon.com.au
p-y3-www-amazon-com-au-kalias.amazon.com.au
www.amazon.com.au
p-nt-www-amazon-com-au-kalias.amazon.com.au
p-yo-www-amazon-com-au-kalias.amazon.com.au
p-y3-www-amazon-com-au-kalias.amazon.com.au
Other certificates including the domain name amazon.com.au
(limited to 100 certificates)
alexa-skills.amazon.com.au
completion.amazon.co.jp
cde-ta-g7g.amazon.com
identity.browserapps.amazon.co.jp
dcp.amazon.co.jp
skills-store-eu.amazon.com
dp-gw-na.amazon.com
dl.amazon.co.jp
aax-fe-retail-direct.amazon-adsystem.com
logistics.amazon.com
argileto.amazon.com
pitangui.amazon.com
*.peg.a2z.com
fls-fe-opf.amazon.com
sellercentral.amazon.com.au
www.amazon.com.au
kindlestore-sha-proxy.amazon.com
brandservices.amazon.com
alexa-skills-beta.amazon.com.au
kep.amazon.com
dp-gw-na.amazon.com
fls-fe.amazon.com
identity.browserapps.amazon.co.jp
pitangui.amazon.com
thumbnails-photos.amazon.co.jp
advertising-api-fe.amazon.com
kep-eu.amazon.com
api.amazon.com.au
ramp.amazon.com
affiliate-program.amazon.com.au
www.amazon.com.au
cde-ta-g7g.amazon.com
kindle.amazon.com
account-p2k.amazon.com
lwa.amazon.com.au
webservices.amazon.co.jp
kindle-store-proxy-endpoint-na.amazon.com
affiliate-program.amazon.com.au
skills-store-eu.amazon.com
skills-store-eu.amazon.com
akamai-renew-cert-digicert-arcus-www.amazon.com
dcp.amazon.co.jp
brandservices.amazon.com
cde-ta-g7g-preprod.amazon.com
www.amazon.com.au
rental-account.partnercentral-na.amazon.com
ddee-preprod.amazon.com
aax.online-panel.advertising.amazon.dev
twitch.amazon.co.jp
cde-ta-g7g.amazon.com
sellercentral.amazon.com.au
*.peg.a2z.com
brandservices.amazon.com
arcus-www.amazon.com.au
completion.amazon.co.jp
dpreview.in
sellercentral.amazon.com.au
sellercentral.amazon.com
*.peg.a2z.com
brandservices.amazon.com
completion.amazon.co.jp
cde-ta-g7g-preprod.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
vendorcentral.amazon.com.au
argileto.amazon.com
*.peg.a2z.com
bob-dispatch-prod-na.amazon.com
argileto.amazon.com
ramp.amazon.com
logistics.amazon.com
ara-fe.amazon.com
puptrack-fe.amazon.com
kindle-store-proxy-endpoint-na.amazon.com
kindle.amazon.com
msh-tablet.amazon.com.au
www22.amazon.com.au
skills-store-eu.amazon.com
ramp.amazon.com
completion.amazon.co.jp
*.peg.a2z.com
ramp.amazon.com
www.amazon.com.au
advertising-fe.amazon.com
brandservices.amazon.com
alexa-skills.amazon.com
aax-fe.amazon.com
read.amazon.com.au
documents.amazon.com.au
aax-fe-retail-direct.amazon-adsystem.com
rental-account.partnercentral-na.amazon.com
bob-dispatch-prod-na.amazon.com
kindle.amazon.com
alexa-comms-mobile-service.amazon.com
dropship.amazon.com
kindle-store-proxy-endpoint-na.amazon.com
cde-ta-g7g.amazon.com
vendorcentral-prod.amazon.com
www.amazon.com.au
dropship.amazon.com
completion.amazon.co.jp
cde-ta-g7g.amazon.com
identity.browserapps.amazon.co.jp
dcp.amazon.co.jp
skills-store-eu.amazon.com
dp-gw-na.amazon.com
dl.amazon.co.jp
aax-fe-retail-direct.amazon-adsystem.com
logistics.amazon.com
argileto.amazon.com
pitangui.amazon.com
*.peg.a2z.com
fls-fe-opf.amazon.com
sellercentral.amazon.com.au
www.amazon.com.au
kindlestore-sha-proxy.amazon.com
brandservices.amazon.com
alexa-skills-beta.amazon.com.au
kep.amazon.com
dp-gw-na.amazon.com
fls-fe.amazon.com
identity.browserapps.amazon.co.jp
pitangui.amazon.com
thumbnails-photos.amazon.co.jp
advertising-api-fe.amazon.com
kep-eu.amazon.com
api.amazon.com.au
ramp.amazon.com
affiliate-program.amazon.com.au
www.amazon.com.au
cde-ta-g7g.amazon.com
kindle.amazon.com
account-p2k.amazon.com
lwa.amazon.com.au
webservices.amazon.co.jp
kindle-store-proxy-endpoint-na.amazon.com
affiliate-program.amazon.com.au
skills-store-eu.amazon.com
skills-store-eu.amazon.com
akamai-renew-cert-digicert-arcus-www.amazon.com
dcp.amazon.co.jp
brandservices.amazon.com
cde-ta-g7g-preprod.amazon.com
www.amazon.com.au
rental-account.partnercentral-na.amazon.com
ddee-preprod.amazon.com
aax.online-panel.advertising.amazon.dev
twitch.amazon.co.jp
cde-ta-g7g.amazon.com
sellercentral.amazon.com.au
*.peg.a2z.com
brandservices.amazon.com
arcus-www.amazon.com.au
completion.amazon.co.jp
dpreview.in
sellercentral.amazon.com.au
sellercentral.amazon.com
*.peg.a2z.com
brandservices.amazon.com
completion.amazon.co.jp
cde-ta-g7g-preprod.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
vendorcentral.amazon.com.au
argileto.amazon.com
*.peg.a2z.com
bob-dispatch-prod-na.amazon.com
argileto.amazon.com
ramp.amazon.com
logistics.amazon.com
ara-fe.amazon.com
puptrack-fe.amazon.com
kindle-store-proxy-endpoint-na.amazon.com
kindle.amazon.com
msh-tablet.amazon.com.au
www22.amazon.com.au
skills-store-eu.amazon.com
ramp.amazon.com
completion.amazon.co.jp
*.peg.a2z.com
ramp.amazon.com
www.amazon.com.au
advertising-fe.amazon.com
brandservices.amazon.com
alexa-skills.amazon.com
aax-fe.amazon.com
read.amazon.com.au
documents.amazon.com.au
aax-fe-retail-direct.amazon-adsystem.com
rental-account.partnercentral-na.amazon.com
bob-dispatch-prod-na.amazon.com
kindle.amazon.com
alexa-comms-mobile-service.amazon.com
dropship.amazon.com
kindle-store-proxy-endpoint-na.amazon.com
cde-ta-g7g.amazon.com
vendorcentral-prod.amazon.com
www.amazon.com.au
dropship.amazon.com
Certificate
The complete raw certificate details for arcus-www.amazon.com.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG5DCCBcygAwIBAgIQB2RVlTVDVulU1SNzBfA1QDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMjMwODMwMDAwMDAwWhcNMjQwNTExMjM1 OTU5WjAiMSAwHgYDVQQDExdhcmN1cy13d3cuYW1hem9uLmNvbS5hdTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK9eY7lyI41hwkGV00QlFisZ4bCCgsjT Mu6qJDdXGrXJ7mBfHtB34jnSEJ8En064wui8u3B9ZbbPSZ/zd3YAXL9/X8eJX+AF 1w0GRaEMTTule0T5XhzvL5VD+KmhhtCi3+z7YU7PH6Om2FEir7v0kMFuoiNntHck Ls3LR0IME5ZH65KuWOjeA9PFNoT6dZZWelcGYxlHrvzUUV6YaAAZIxE7qBUp1lmP 4HbS55ncUE4pbZKaOik3jM42MdzZupLN9+KniseW8AU8QJ+lHrtmn5tVOMak04PK tZzvjJPWulq/noy9Q8zE9NLKt3QSXgMO027zPwpwYF9z5xu5ZxblRxUCAwEAAaOC A/IwggPuMB8GA1UdIwQYMBaAFCRuKy3QapJRUSVpAaqaR6aJ50AgMB0GA1UdDgQW BBTq7OVkZHrlXgP7Qq1BiOWWhjY7PjCBvgYDVR0RBIG2MIGzghdhcmN1cy13d3cu YW1hem9uLmNvbS5hdYIRd3d3LmFtYXpvbi5jb20uYXWCK3AtbnQtd3d3LWFtYXpv bi1jb20tYXUta2FsaWFzLmFtYXpvbi5jb20uYXWCK3AteW8td3d3LWFtYXpvbi1j b20tYXUta2FsaWFzLmFtYXpvbi5jb20uYXWCK3AteTMtd3d3LWFtYXpvbi1jb20t YXUta2FsaWFzLmFtYXpvbi5jb20uYXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjB3BgNVHR8EcDBuMDWgM6Axhi9odHRwOi8v Y3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDA1oDOgMYYv aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmww PgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5k aWdpY2VydC5jb20vQ1BTMHQGCCsGAQUFBwEBBGgwZjAkBggrBgEFBQcwAYYYaHR0 cDovL29jc3AuZGlnaWNlcnQuY29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0 cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNydDAMBgNVHRMBAf8E AjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYpDyEbVAAAEAwBHMEUCIGpQ4OweE0dsliX7bL/8 5VPGY3QfR9qTa4ytqjKXlgKyAiEAgskDp07WsBsmrod6UAbJMOwvgaxwdWkOUpH1 mMpFUBQAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYpDyEUR AAAEAwBGMEQCIBzp31zodqnRgpgPlVrrvsfSgztdoBloQLHHd6YCtuZYAiAJq6Du RkPfUsiwFqyy3E7Pap44fks0BzO/exNDh9qWiwB2ANq2v2s/tbYin5vCu1xr6HCR cWy7UYSFNL2kPTBI1/urAAABikPIRMEAAAQDAEcwRQIgPW/Hlc6mA7xzQyhl4SAb dAQEAKjJO8mwpfFmtR7eVcICIQCnkpcpU245LTaLkAs+C7l68VExcky2TomiCEtO rAlZoTANBgkqhkiG9w0BAQsFAAOCAQEApxv2RvYVoMwkv7IRUhWK6JfiuD0ikwYz RQtYkVeRxApy/QosNCeYGBgDaPGQUjm4QPdGThy/8omquZqtQ5C/Y0pDuhTmcg7G cIQKWWd2lU3dstna1wyZ/51RYK1L5j8buBBNloNySQCfLQ99YhAy5Pezwr7vQRjq 5SG2Ay5lYghoSQTE5jLOYS8SEU9hsGHFpcSyiMKYW8jbsxBeGqNPH959lcCAZURz NZf+6nTERMojIjLZOiRJDVf8rll3DJ/m1YrQ5S03yL5AuBL7VGBUromfIHVUXRHF g7P0N8oi02TIXPwU07gFOjcrzksrdPrts2GTOnp4MNikALcwCPGXug== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15juXIjjWHCQZXTRCUW KxnhsIKCyNMy7qokN1catcnuYF8e0HfiOdIQnwSfTrjC6Ly7cH1lts9Jn/N3dgBc v39fx4lf4AXXDQZFoQxNO6V7RPleHO8vlUP4qaGG0KLf7PthTs8fo6bYUSKvu/SQ wW6iI2e0dyQuzctHQgwTlkfrkq5Y6N4D08U2hPp1llZ6VwZjGUeu/NRRXphoABkj ETuoFSnWWY/gdtLnmdxQTiltkpo6KTeMzjYx3Nm6ks334qeKx5bwBTxAn6Ueu2af m1U4xqTTg8q1nO+Mk9a6Wr+ejL1DzMT00sq3dBJeAw7TbvM/CnBgX3PnG7lnFuVH FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9825561482644532868719231816378103104 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arcus-www.amazon.com.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22138248590154836454479281134775287367858947096966500787575773827834554105343614731892392473491233979079796671330492684714616295070442313867867387016961143247553815106083578092205438572339030406087405014703229283666711015951635142361152911655150283229631535435743927757988933602780542719293998027685788520766313177196496302070930631789729820338544421515208080242028129902179504998932746437566669172034182755509936947884843772922755602523263028636617388038213581808455291045200575103508288558258007727357724671144964240495042972456094493654179465089550327598794599773223885390836938539457698103000544540214375653656341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eaece564647ae55e03fb42ad4188e59686363b3e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (182 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcus-www.amazon.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-nt-www-amazon-com-au-kalias.amazon.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-yo-www-amazon-com-au-kalias.amazon.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-y3-www-amazon-com-au-kalias.amazon.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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