connect.libertyiu.com
- Liberty Mutual Group -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 02:7b:e6:c9:db:34:4f:64:82:44:a7:c3:d5:2d:c8:52 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Liberty Mutual Group
Organization:
Liberty Mutual Group
Organization unit: GS ATS
Organization unit: GS ATS
State / Province:
New Hampshire
Locality: Portsmouth
Country: US
Locality: Portsmouth
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:7b:e6:c9:db:34:4f:64:82:44:a7:c3:d5:2d:c8:52Serial Number (int): 3301789452079577009954126162807343186
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 06:94:9c:65:e3:72:dd:d2:b6:d1:f0:ae:19:12:75:6e:ce:0d:eb:eb
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): 91:1b:98:8b:6d:43:c2:ad:ff:54:1d:2f:38:55:4e:86:57:24:ae:db
Fingerprint (sha256): 08:5f:05:0c:48:0a:b9:8d:64:f7:8c:ec:b8:24:0d:ea:16:9d:08:bf:35:ca:43:de:8f:e4:fd:18:4c:55:b0:12
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate connect.libertyiu.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for connect.libertyiu.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
connect.libertyiu.com
Other certificates including the domain name libertyiu.com
(limited to 100 certificates)
storagetanks.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-03p.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
cs-pool-03k.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmsip-hlyncf01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
sip-kdc-03.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
secure.libertyiu.com
sip-pdc-03.libertymutual.com
secure.libertyiu.com
cswebext-pool-02p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
connect.libertyiu.com
cswebext-pool-03p.libertymutual.com
access-kdc-02.libertymutual.com
int-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cms.libertyiu.com
test-www.libertyiu.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
isoresponse.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
us-extranet.libertyiu.com
test-www.libertyiu.com
pdc-vpn-01.libertyiu.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
mail-na.lm.lmig.com
uk-secure.libertyiu.com
Cs-pool-03p.lm.lmig.com
test-www.libertyiu.com
cs-pool-02p.lm.lmig.com
cs-pool-02p.lm.lmig.com
cas-pdc.lm.lmig.com
cas-pdc.lm.lmig.com
uk-secure.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
secure.libertyiu.com
Cs-pool-03k.lm.lmig.com
www.libertyiu.com
connect.libertyiu.com
secure.libertyiu.com
webmail-ap.libertyiu.com
eu-access-01.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
storagetanks.libertyiu.com
vmsip-hsfbfe01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmqip-hlyncf01.lm.lmig.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
eu-pool-02.lm.lmig.com
test-www.libertyiu.com
sip-kdc-03.libertymutual.com
test-www.libertyiu.com
storagetanks.libertyiu.com
mail-na.lm.lmig.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cs-pool-02k.lm.lmig.com
cswebext-pool-03k.libertymutual.com
us-mdm.libertyiu.com
int-www.libertyiu.com
www.libertyiu.com
cs-pool-02k.lm.lmig.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-03p.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
cs-pool-03k.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmsip-hlyncf01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
sip-kdc-03.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
secure.libertyiu.com
sip-pdc-03.libertymutual.com
secure.libertyiu.com
cswebext-pool-02p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
connect.libertyiu.com
cswebext-pool-03p.libertymutual.com
access-kdc-02.libertymutual.com
int-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cms.libertyiu.com
test-www.libertyiu.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
isoresponse.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
us-extranet.libertyiu.com
test-www.libertyiu.com
pdc-vpn-01.libertyiu.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
mail-na.lm.lmig.com
uk-secure.libertyiu.com
Cs-pool-03p.lm.lmig.com
test-www.libertyiu.com
cs-pool-02p.lm.lmig.com
cs-pool-02p.lm.lmig.com
cas-pdc.lm.lmig.com
cas-pdc.lm.lmig.com
uk-secure.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
secure.libertyiu.com
Cs-pool-03k.lm.lmig.com
www.libertyiu.com
connect.libertyiu.com
secure.libertyiu.com
webmail-ap.libertyiu.com
eu-access-01.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
storagetanks.libertyiu.com
vmsip-hsfbfe01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmqip-hlyncf01.lm.lmig.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
eu-pool-02.lm.lmig.com
test-www.libertyiu.com
sip-kdc-03.libertymutual.com
test-www.libertyiu.com
storagetanks.libertyiu.com
mail-na.lm.lmig.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cs-pool-02k.lm.lmig.com
cswebext-pool-03k.libertymutual.com
us-mdm.libertyiu.com
int-www.libertyiu.com
www.libertyiu.com
cs-pool-02k.lm.lmig.com
test-risk-lifecycle-id.libertymutual.com
Certificate
The complete raw certificate details for connect.libertyiu.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIQAnvmyds0T2SCRKfD1S3IUjANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwNjExMDAwMDAwWhcNMjAwNjExMTIw MDAwWjCBijELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU5ldyBIYW1wc2hpcmUxEzAR BgNVBAcTClBvcnRzbW91dGgxHTAbBgNVBAoTFExpYmVydHkgTXV0dWFsIEdyb3Vw MQ8wDQYDVQQLEwZHUyBBVFMxHjAcBgNVBAMTFWNvbm5lY3QubGliZXJ0eWl1LmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOF54wobsqdQt4aPAbY7 wSlAlZtGxEHJYUgW3izbJRhG5j1tFz5ulqmZ+rBe+FRbX5BebfSgKOFQTBmfsHZ/ z23/lgLJfCU80aOimxbXjPyQkqIbD3CQmL0oOrUa5RimShSY3V+R3iHVHd8AoW6S Fcwb8HMMUprifCjejbTNsqhBCZ0/s7Hu3MxbCdBNwgb8qTiYq7UjZH4NxJYaSIfE t4G5OrxNik01mzgOPzUjMQVqzdFmE/BPS9hWXyAwSDw382Y4cSRgN7HDiJ3Fx6SO nY0SEtrNtcuMAgWZB92tRx11y78nRv01iMLydjLhPIDutdzUeIvJWFzJyNljf7NM XhkCAwEAAaOCAfIwggHuMB8GA1UdIwQYMBaAFCRuKy3QapJRUSVpAaqaR6aJ50Ag MB0GA1UdDgQWBBQGlJxl43Ld0rbR8K4ZEnVuzg3r6zAgBgNVHREEGTAXghVjb25u ZWN0LmxpYmVydHlpdS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjB3BgNVHR8EcDBuMDWgM6Axhi9odHRwOi8vY3JsMy5k aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDA1oDOgMYYvaHR0cDov L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdAYIKwYBBQUHAQEEaDBmMCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3J0MAkG A1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AEXVyGD4TRPM5DUFjg0PIVTMMuHI9y+LNtHeOwOi+ddOXrCPhO0nZzKcqGPwvf9e MiEEuMDzGm5rregxinbewpLELok8WXK/NuKKep5tq/Z77Ig3PuVKBx8pyGOYXlBx rRfAiTGgz2WPX+RBWyjIJQAFJXxCElg6beiuO54KCSodXpHuI38RcetdqgBb6Cla gL5kCf7kJqoEe97+Xt3tjXJKH1pDNhnLbFhg/LwVtHp9NIok69+hsZ2zneN0pf19 vixFudzlAX9xKNx/L3YcilZwgHMQupqlYRXI8VfiC5NtonYDuxUkFzDI/2iz21/6 rvjvII6NfZrTPPJmL8orv9o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XnjChuyp1C3ho8BtjvB KUCVm0bEQclhSBbeLNslGEbmPW0XPm6WqZn6sF74VFtfkF5t9KAo4VBMGZ+wdn/P bf+WAsl8JTzRo6KbFteM/JCSohsPcJCYvSg6tRrlGKZKFJjdX5HeIdUd3wChbpIV zBvwcwxSmuJ8KN6NtM2yqEEJnT+zse7czFsJ0E3CBvypOJirtSNkfg3ElhpIh8S3 gbk6vE2KTTWbOA4/NSMxBWrN0WYT8E9L2FZfIDBIPDfzZjhxJGA3scOIncXHpI6d jRIS2s21y4wCBZkH3a1HHXXLvydG/TWIwvJ2MuE8gO613NR4i8lYXMnI2WN/s0xe GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3301789452079577009954126162807343186 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GS ATS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.libertyiu.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28463723274565224815601216457544377865143217957379697729908203209948815782886810856407256386268630462648573355322950977860097870005480487153861299220594194735366714252880905768566743769382315349377036338992356247468002202534037000667399186446201984096836087272036908860782931165847230515278003189278427824298606324902364758307866419180990766126345470244937085077674306227234485719458159482966991252333961788611717653228944196758947358862721585499149214339336727516250830215818378211531345106670672772050716656537950544562541129447134780269830340156017826207503069073398506211401120940249884200407265336686314565426713 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06949c65e372ddd2b6d1f0ae1912756ece0debeb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.libertyiu.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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