blog.fatherhood.org
- HubSpot, Inc. -
Issued by CloudFlare Inc Compatibility CA-3
About this certificate
This digital certificate with serial number 01:2a:e4:54:18:66:7e:55:9d:eb:3b:fd:51:4f:7a:f1 was issued on by CloudFlare, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)
HubSpot, Inc.
Organization:
HubSpot, Inc.
State / Province:
MA
Locality: Cambridge
Country: US
Locality: Cambridge
Country: US
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:2a:e4:54:18:66:7e:55:9d:eb:3b:fd:51:4f:7a:f1Serial Number (int): 1551935515950209679205422245574834929
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: db:d3:79:b4:e3:9a:13:4c:76:1e:60:89:06:e9:b5:72:fe:b8:04:5a
AuthorityKeyId: 97:49:c5:f6:84:14:73:df:73:ba:cc:a9:66:ba:f9:a6:3c:59:c6:ae
Fingerprint (sha1): 71:40:a8:4d:81:95:98:22:d2:70:b6:a8:0f:86:19:fa:83:5a:d8:71
Fingerprint (sha256): 08:ff:ce:4c:8a:7c:db:41:dd:22:59:29:44:0b:78:dc:22:54:63:d2:7b:1e:ad:05:d7:33:b1:ea:e0:76:f2:38
Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl
Check the revocation status for certificate blog.fatherhood.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.fatherhood.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.fatherhood.org
Other certificates including the domain name fatherhood.org
(limited to 100 certificates)
store.fatherhood.org
www.info.fatherhood.org
*.fatherhood.org
blog.fatherhood.org
readz.com
blog.fatherhood.org
store.fatherhood.org
readz.com
secure0140.hubspot.com
san3249.cdntwrk.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
san2468.cdntwrk.com
readz.com
info.fatherhood.org
san2504.cdntwrk.com
readz.com
san2507.cdntwrk.com
readz.com
san2552.cdntwrk.com
readz.com
store.fatherhood.org
san2456.cdntwrk.com
readz.com
readz.com
readz.com
secure0140.hubspot.com
readz.com
community.fatherhood.org
www.fatherhood.org
www.fatherhood.org
readz.com
secure0140.hubspot.com
store.fatherhood.org
www.info.fatherhood.org
blog.fatherhood.org
san2276.cdntwrk.com
san3243.cdntwrk.com
san2504.cdntwrk.com
secure0140.hubspot.com
san3249.cdntwrk.com
san3176.cdntwrk.com
blog.fatherhood.org
san2255.cdntwrk.com
readz.com
secure0140.hubspot.com
capacitybuilding.fatherhood.org
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
readz.com
readz.com
readz.com
blog.fatherhood.org
info.fatherhood.org
secure0140.hubspot.com
blog.fatherhood.org
readz.com
san2552.cdntwrk.com
readz.com
readz.com
secure0140.hubspot.com
secure0140.hubspot.com
readz.com
secure0140.hubspot.com
info.fatherhood.org
readz.com
readz.com
readz.com
readz.com
partners.fatherhood.org
store.fatherhood.org
readz.com
store.fatherhood.org
aps-grads.fatherhood.org
info.fatherhood.org
readz.com
blog.fatherhood.org
secure0140.hubspot.com
community.fatherhood.org
capacitybuilding.fatherhood.org
san2276.cdntwrk.com
www.blog.fatherhood.org
readz.com
info.fatherhood.org
blog.fatherhood.org
readz.com
san2594.cdntwrk.com
readz.com
secure0140.hubspot.com
store.fatherhood.org
readz.com
secure0140.hubspot.com
www.fatherhood.org
secure0140.hubspot.com
secure0140.hubspot.com
www.info.fatherhood.org
*.fatherhood.org
blog.fatherhood.org
readz.com
blog.fatherhood.org
store.fatherhood.org
readz.com
secure0140.hubspot.com
san3249.cdntwrk.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
san2468.cdntwrk.com
readz.com
info.fatherhood.org
san2504.cdntwrk.com
readz.com
san2507.cdntwrk.com
readz.com
san2552.cdntwrk.com
readz.com
store.fatherhood.org
san2456.cdntwrk.com
readz.com
readz.com
readz.com
secure0140.hubspot.com
readz.com
community.fatherhood.org
www.fatherhood.org
www.fatherhood.org
readz.com
secure0140.hubspot.com
store.fatherhood.org
www.info.fatherhood.org
blog.fatherhood.org
san2276.cdntwrk.com
san3243.cdntwrk.com
san2504.cdntwrk.com
secure0140.hubspot.com
san3249.cdntwrk.com
san3176.cdntwrk.com
blog.fatherhood.org
san2255.cdntwrk.com
readz.com
secure0140.hubspot.com
capacitybuilding.fatherhood.org
secure0140.hubspot.com
secure0140.hubspot.com
secure0140.hubspot.com
readz.com
readz.com
readz.com
blog.fatherhood.org
info.fatherhood.org
secure0140.hubspot.com
blog.fatherhood.org
readz.com
san2552.cdntwrk.com
readz.com
readz.com
secure0140.hubspot.com
secure0140.hubspot.com
readz.com
secure0140.hubspot.com
info.fatherhood.org
readz.com
readz.com
readz.com
readz.com
partners.fatherhood.org
store.fatherhood.org
readz.com
store.fatherhood.org
aps-grads.fatherhood.org
info.fatherhood.org
readz.com
blog.fatherhood.org
secure0140.hubspot.com
community.fatherhood.org
capacitybuilding.fatherhood.org
san2276.cdntwrk.com
www.blog.fatherhood.org
readz.com
info.fatherhood.org
blog.fatherhood.org
readz.com
san2594.cdntwrk.com
readz.com
secure0140.hubspot.com
store.fatherhood.org
readz.com
secure0140.hubspot.com
www.fatherhood.org
secure0140.hubspot.com
secure0140.hubspot.com
Certificate
The complete raw certificate details for blog.fatherhood.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIQASrkVBhmflWd6zv9UU968TANBgkqhkiG9w0BAQUFADB5 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lz Y28xGTAXBgNVBAoTEENsb3VkRmxhcmUsIEluYy4xKjAoBgNVBAMTIUNsb3VkRmxh cmUgSW5jIENvbXBhdGliaWxpdHkgQ0EtMzAeFw0xNzEwMTgwMDAwMDBaFw0xODA4 MTAxMjAwMDBaMGQxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNQTESMBAGA1UEBxMJ Q2FtYnJpZGdlMRYwFAYDVQQKEw1IdWJTcG90LCBJbmMuMRwwGgYDVQQDExNibG9n LmZhdGhlcmhvb2Qub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA ylPSR979SaoxWCyFoSGDcx5MVQaOk8vErRSB5ljJyq87VvUPM4+DrQ22JIGN4MUX +E41qyOLfLm3EJofKyQccqssgEE2mABEyNwhxOVMDghwdxUgBAWtofynALrq8sNc p+VJqBwa/V3QmO2cs2pzMPTa7lx+ANUHXrFiEYqYLMlhNjmLqhfEeR1HZG965rUR gBW+WawpE8b6oehIFDrcv9fUSsjl7qBC801qmctWW318+y/Ir5bUn1CFFqcrQx2Z E8gt/F9rPxXMX11UucUQ2C3Nrng1VU7OkoVug+LiwD1LUZoLAIyUtMxwMLYQFdDH 393JZVhU97rHRy/c2hfHEQIDAQABo4IB+jCCAfYwHwYDVR0jBBgwFoAUl0nF9oQU c99zusypZrr5pjxZxq4wHQYDVR0OBBYEFNvTebTjmhNMdh5giQbptXL+uARaMB4G A1UdEQQXMBWCE2Jsb2cuZmF0aGVyaG9vZC5vcmcwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8 hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vQ2xvdWRGbGFyZUluY0NvbXBhdGli aWxpdHlDQTMuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vQ2xv dWRGbGFyZUluY0NvbXBhdGliaWxpdHlDQTMuY3JsMEIGA1UdIAQ7MDkwNwYJYIZI AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D UFMwgYAGCCsGAQUFBwEBBHQwcjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln aWNlcnQuY29tMEoGCCsGAQUFBzAChj5odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j b20vQ2xvdWRGbGFyZUluY0NvbXBhdGliaWxpdHlDQS0zLmNydDAMBgNVHRMBAf8E AjAAMA0GCSqGSIb3DQEBBQUAA4IBAQBRwDhvErXGr2gYOn5yB7lwGYK9GpEUyqUu shH8jnyxrSstlOs1nVy/WLDsI96WZ80cgdX8cSb4wfO8jZo7TjSIL8xhYpkZyq1m qMH9CTzU/jXMEOsNOt95w0orN9E9zVtOlxKTcCerA8ve/xvupUoYbDl/Sko4ANM+ uJ1w4czs1rVfBoF72oDlrITIFWztPhq/XZAkTL8xvJQKLaE6MgYUcNkaJQgQ+aKg 4rVq5nYRS+Oc3He3aQMYY5ai8uhbTSr2msaAEBLFM7GKmlj4xxGVsSyxALcpT+Gn FiwqRxjME5YRS2h9sCmDS5WKTi+NtiWO7cQXboYY7UjvhdTq4ymM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylPSR979SaoxWCyFoSGD cx5MVQaOk8vErRSB5ljJyq87VvUPM4+DrQ22JIGN4MUX+E41qyOLfLm3EJofKyQc cqssgEE2mABEyNwhxOVMDghwdxUgBAWtofynALrq8sNcp+VJqBwa/V3QmO2cs2pz MPTa7lx+ANUHXrFiEYqYLMlhNjmLqhfEeR1HZG965rURgBW+WawpE8b6oehIFDrc v9fUSsjl7qBC801qmctWW318+y/Ir5bUn1CFFqcrQx2ZE8gt/F9rPxXMX11UucUQ 2C3Nrng1VU7OkoVug+LiwD1LUZoLAIyUtMxwMLYQFdDH393JZVhU97rHRy/c2hfH EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1551935515950209679205422245574834929 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc Compatibility CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HubSpot, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.fatherhood.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25541471480537922945257871768145791703237814348041268335129599892706785328812296583848744213046032771830876273492755540042900371812869377372801881104455307095180025661391969759747962781599068232873126418620601900759017143468300257056625479447008978989723220328720837873842622820501828213682748904732953525207592860323618305898957467729394543791472739493293314974454934499073092538324898385989381550973129849313588416579688328268069655536435106987761209068556495187985638512577578466867360061331394638885054792171491211323903903753899296124750142540406517124401269166533834187989339608269492156758141570232668516763409 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9749c5f6841473df73bacca966baf9a63c59c6ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dbd379b4e39a134c761e608906e9b572feb8045a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.fatherhood.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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