webmail.icelandairgroup.is
- Icelandair ehf -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 05:ee:66:9b:2e:b7:82:e0:a8:91:a8:ed:29:92:f8:68 was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Icelandair ehf
Organization:
Icelandair ehf
Organization unit: Email
Organization unit: Email
Locality:
Reykjavik
Country: IS
Country: IS
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:ee:66:9b:2e:b7:82:e0:a8:91:a8:ed:29:92:f8:68Serial Number (int): 7883987731858792450096334318381234280
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: b6:dd:6d:0f:c5:96:8e:e8:27:a2:fc:dc:f9:2e:7c:08:8e:87:a6:19
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 7f:d3:dd:88:70:23:90:33:22:64:e0:25:ed:61:95:73:23:bd:7d:b8
Fingerprint (sha256): 08:7c:5f:13:8a:2a:98:a3:c4:e1:ea:49:24:22:bb:b7:7b:c2:33:81:9c:35:16:85:b4:5d:7f:7e:de:1d:71:f2
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate webmail.icelandairgroup.is
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webmail.icelandairgroup.is
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webmail.icelandairgroup.is
autodiscover.icelandair.is
icerekms03.icelandair.is
icerekms04.icelandair.is
autodiscover.amadeus.is
autodiscover.icelandair.is
icerekms03.icelandair.is
icerekms04.icelandair.is
autodiscover.amadeus.is
Other certificates including the domain name icelandairgroup.is
(limited to 100 certificates)
webmail.icelandairgroup.is
lyncweb.icelandair.is
*.icelandairgroup.is
icelandairgroup.is
*.icelandairgroup.is
overcast.io
lyncweb.icelandair.is
webmail.icelandairgroup.is
overcast.io
overcast.io
webmail.icelandairgroup.is
webmail.icelandairgroup.is
sni.cloudflaressl.com
sip.icelandair.is
*.icelandairgroup.is
overcast.io
overcast.io
lyncweb.icelandair.is
webmail.icelandairgroup.is
lyncweb.icelandair.is
sip.icelandair.is
overcast.io
lyncweb.icelandair.is
sip.icelandair.is
webmail.icelandairgroup.is
*.icelandairgroup.is
sni.cloudflaressl.com
lyncweb.icelandair.is
*.icelandairgroup.is
icelandairgroup.is
*.icelandairgroup.is
overcast.io
lyncweb.icelandair.is
webmail.icelandairgroup.is
overcast.io
overcast.io
webmail.icelandairgroup.is
webmail.icelandairgroup.is
sni.cloudflaressl.com
sip.icelandair.is
*.icelandairgroup.is
overcast.io
overcast.io
lyncweb.icelandair.is
webmail.icelandairgroup.is
lyncweb.icelandair.is
sip.icelandair.is
overcast.io
lyncweb.icelandair.is
sip.icelandair.is
webmail.icelandairgroup.is
*.icelandairgroup.is
sni.cloudflaressl.com
Certificate
The complete raw certificate details for webmail.icelandairgroup.is in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIQBe5mmy63guCokajtKZL4aDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xOTAyMjYwMDAwMDBaFw0yMTA1MjExMjAwMDBa MG8xCzAJBgNVBAYTAklTMRIwEAYDVQQHEwlSZXlramF2aWsxFzAVBgNVBAoTDklj ZWxhbmRhaXIgZWhmMQ4wDAYDVQQLEwVFbWFpbDEjMCEGA1UEAxMad2VibWFpbC5p Y2VsYW5kYWlyZ3JvdXAuaXMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC AQCqH1oPN6ccayiZfYLZnHk+cq7bVC/dcFleyY8Tp8TR9kyo1xWW3zjyu9S5bFU7 O6IryBEnxVYSDwMrmtqWqm4n0q/IJYpdAhXNs6fXoglTWf9RuKFlZdxzE+gtEt8f CL1BPeexjnJRVGSzaYEvaNHmR0i2uqdmz9/6yjfZL8alyjyJ1389s5eWeHQOSwCj zJ6DjSqWsls/GWD90g1i39kTFdkTeY8IUVGhm707/eNtGlyQI5icr5GymvpEKAGT BbTUICl+y3Oc/ooNLviivzp9lw/LTK867f4ZEEWlEO9DERJ3Hw4kfsm1sFfRXZQv dC3abQV4nw/2Oeh+2uCJVJpPS1vRxNtKCYTTOWXEMmB6A4cMBsmIsODPkfVyvtGN hXTIFvy4aL6CFiFgJrF3gLeHUYpY2yfWMcILbTMK+QTbxdmOjeFXDW2UuVXYlD/Y buKOTX9yUgj0+X7IyXxWQnbLa1+D3zSJiu5XeGMDCYySggDuDBnrfAX4ma3kOSYr DyFUx7/yhqSsfDHQr8sL64s15r2Awx5bzCuyoiW5XDiXlqc0OT+yhZ+X0x8T1eZ5 f3fh/bFhUlPXfxsCN6oOioDSGthDd9a1a/UQTHHOv6TFyxkqHw6UMc7eQ+9et/Iy I9wDajQ3yRXopnyH3OCpS/QogoDxUWvzHNFbJ/Zd7ctFhQIDAQABo4ICdDCCAnAw HwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFLbdbQ/F lo7oJ6L83PkufAiOh6YZMIGQBgNVHREEgYgwgYWCGndlYm1haWwuaWNlbGFuZGFp cmdyb3VwLmlzghphdXRvZGlzY292ZXIuaWNlbGFuZGFpci5pc4IYaWNlcmVrbXMw My5pY2VsYW5kYWlyLmlzghhpY2VyZWttczA0LmljZWxhbmRhaXIuaXOCF2F1dG9k aXNjb3Zlci5hbWFkZXVzLmlzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMu ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDov L2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAE RTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNl U2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAI8pumThmCU4VxALpqykgxuEb/SGCg1AOHD9ND4S 7o7qtpbPUqX0AyED6yTz0IRucOLERNd9g+d2SSUdcsLbNRFiLT9wuo9OhTPNkTXA VDgP2wmWwLM/z/Aa4lELF2Fykoas43Ih0WNkNUJJMlQti4ashPl9SZquzYyxRAS2 YaRjyIBjjgTtb9p6uil3vmRJ6PdG5JWEktlyN7w2hec6LjRgW1Ns/Yhh3ecIXqwA O7VNgI7iqJ0ix+TP6/PznnUSbbEaS7shL8M7UV9XGAwnYBZ/7jHHzVx5J6aADwYF 3yUfsXRd4fV3wN9+NBtyfXVGGBWQ5nwZL5bJi9NqR6tBoss= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqh9aDzenHGsomX2C2Zx5 PnKu21Qv3XBZXsmPE6fE0fZMqNcVlt848rvUuWxVOzuiK8gRJ8VWEg8DK5ralqpu J9KvyCWKXQIVzbOn16IJU1n/UbihZWXccxPoLRLfHwi9QT3nsY5yUVRks2mBL2jR 5kdItrqnZs/f+so32S/Gpco8idd/PbOXlnh0DksAo8yeg40qlrJbPxlg/dINYt/Z ExXZE3mPCFFRoZu9O/3jbRpckCOYnK+Rspr6RCgBkwW01CApfstznP6KDS74or86 fZcPy0yvOu3+GRBFpRDvQxESdx8OJH7JtbBX0V2UL3Qt2m0FeJ8P9jnoftrgiVSa T0tb0cTbSgmE0zllxDJgegOHDAbJiLDgz5H1cr7RjYV0yBb8uGi+ghYhYCaxd4C3 h1GKWNsn1jHCC20zCvkE28XZjo3hVw1tlLlV2JQ/2G7ijk1/clII9Pl+yMl8VkJ2 y2tfg980iYruV3hjAwmMkoIA7gwZ63wF+Jmt5DkmKw8hVMe/8oakrHwx0K/LC+uL Nea9gMMeW8wrsqIluVw4l5anNDk/soWfl9MfE9XmeX934f2xYVJT138bAjeqDoqA 0hrYQ3fWtWv1EExxzr+kxcsZKh8OlDHO3kPvXrfyMiPcA2o0N8kV6KZ8h9zgqUv0 KIKA8VFr8xzRWyf2Xe3LRYUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7883987731858792450096334318381234280 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reykjavik' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Icelandair ehf' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Email' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.icelandairgroup.is' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694039117201177680484251551377420501146368346655847424383385813071467817917450270590068070903579910580861151844878821427362436348019607480139052250022186186568069750540219972688351593262789781218148998066861384875820145801757470814760268815401387769924645054721618738086983659784134594655309562316597948994073178681500967353232932024082773652064161674691551446423196180100090782616156962473076707370931301855530864730106853003735697260120485729354044708722065960783737882994571101182225034956812789418127156224568385196847658742357770372659131389700089829310401672269944559305312256390010177158847681792734360523671675434029799695662007737480547597444273228939422358293901712345755833578133886742805504673016243831774196702920931738612105509733613493343719536067844692227958544380625322470315179003907061592910124058037084536867866340639985256534862350396000569927763802370959244450777025029859360399354037240228387706892132131009323975681634949311534928738820664680504164437940070989832093029997084496232135428206821736040392214304977575309231236320666121771875891308151698843841868706865534625323443948757004248087614831027357514250515154940993584696192408580385560165025390897885951419236363093573175872986292700128680132978886021 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b6dd6d0fc5968ee827a2fcdcf92e7c088e87a619 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.icelandairgroup.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icerekms03.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icerekms04.icelandair.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.amadeus.is' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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