gateway.staging.braintreepayments.com
- PayPal, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:d1:c6:87:43:35:03:a0:dd:1b:30:6a:11:fe:df:69 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
PayPal, Inc.
Organization:
PayPal, Inc.
State / Province:
California
Locality: San Jose
Country: US
Locality: San Jose
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:d1:c6:87:43:35:03:a0:dd:1b:30:6a:11:fe:df:69Serial Number (int): 2418444672921743164676774169438773097
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 1e:09:34:07:85:6f:fc:0e:e0:11:dc:a8:a5:cf:3c:9b:71:99:98:d8
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 1c:b1:dd:f2:56:53:1e:bf:62:ab:6f:30:c7:78:ff:37:c9:71:58:13
Fingerprint (sha256): 09:65:26:28:ab:70:3a:19:fe:ba:c3:2a:0f:c4:67:0a:64:60:49:ac:72:db:15:08:be:37:53:a2:f8:a2:c7:68
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate gateway.staging.braintreepayments.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gateway.staging.braintreepayments.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gateway.staging.braintreepayments.com
gatewayapi.staging.braintreepayments.com
api.staging.braintreepayments.com
gatewayapi.staging.braintreepayments.com
api.staging.braintreepayments.com
Other certificates including the domain name braintreepayments.com
(limited to 100 certificates)
statuspage.io
rundeck.qwt.braintreepayments.com
status.acquia.com
statuspage.io
statuspage.io
statuspage.io
js-sdk-integration.sand.braintreepayments.com
apply.qa.braintreepayments.com
blue-front-door-us-east-1-proxy.staging.braintreepayments.com
resources.braintreepayments.com
watchtower.sand.braintreepayments.com
gstatic.dev.braintreepayments.com
statuspage.io
resources.braintreepayments.com
panel.sandbox.braintreegateway.com
graphql.braintreepayments.com
login.staging.braintreepayments.com
statuspage.io
opscenter.qa.braintreepayments.com
statuspage.io
dimension-finder-stag.sandbox.braintree-api.com
www.braintreepayments.com
collins.qwt.braintreepayments.com
billing.braintreepayments.com
statuspage.io
*.produswest2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
disputin.sandbox.braintree.tools
statuspage.io
billing.qa2.braintreepayments.com
cosmos-authy.braintreepayments.com
braintreepayments.com
statuspage.io
adxstatus.com
statuspage.io
status.acquia.com
demo.braintreepayments.com
solidfire.chi.braintreepayments.com
statuspage.io
statuspage.io
www.paypal-status.com
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
provisioner.qa.braintreepayments.com
billing.qa2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
provisioner.sand.braintreepayments.com
payments.braintree-api.com
statuspage.io
statuspage.io
puppet.braintreepayments.com
decisions.qa.braintreepayments.com
statuspage.io
statuspage.io
gateway.staging.braintreepayments.com
cosmos-authy.braintreepayments.com
brand.braintreepayments.com
statuspage.io
statuspage.io
login.qa.braintreepayments.com
statuspage.io
apply.qa.braintreepayments.com
logs-sand.braintreepayments.com
statuspage.io
billing-registration.braintreepayments.com
panel.gateway.qa.braintreepayments.com
statuspage.io
watchtower.qwt.braintreepayments.com
statuspage.io
statuspage.io
collins.chi.braintreepayments.com
statuspage.io
login.qa.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
jabber.braintreepayments.com
mission-control.braintree-api.com
*.qa.braintreepayments.com
collins.chi.braintreepayments.com
graphql.staging.braintreepayments.com
statuspage.io
*.dev.cosmos.braintreepayments.com
rundeck.qwt.braintreepayments.com
status.acquia.com
statuspage.io
statuspage.io
statuspage.io
js-sdk-integration.sand.braintreepayments.com
apply.qa.braintreepayments.com
blue-front-door-us-east-1-proxy.staging.braintreepayments.com
resources.braintreepayments.com
watchtower.sand.braintreepayments.com
gstatic.dev.braintreepayments.com
statuspage.io
resources.braintreepayments.com
panel.sandbox.braintreegateway.com
graphql.braintreepayments.com
login.staging.braintreepayments.com
statuspage.io
opscenter.qa.braintreepayments.com
statuspage.io
dimension-finder-stag.sandbox.braintree-api.com
www.braintreepayments.com
collins.qwt.braintreepayments.com
billing.braintreepayments.com
statuspage.io
*.produswest2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
disputin.sandbox.braintree.tools
statuspage.io
billing.qa2.braintreepayments.com
cosmos-authy.braintreepayments.com
braintreepayments.com
statuspage.io
adxstatus.com
statuspage.io
status.acquia.com
demo.braintreepayments.com
solidfire.chi.braintreepayments.com
statuspage.io
statuspage.io
www.paypal-status.com
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
provisioner.qa.braintreepayments.com
billing.qa2.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
provisioner.sand.braintreepayments.com
payments.braintree-api.com
statuspage.io
statuspage.io
puppet.braintreepayments.com
decisions.qa.braintreepayments.com
statuspage.io
statuspage.io
gateway.staging.braintreepayments.com
cosmos-authy.braintreepayments.com
brand.braintreepayments.com
statuspage.io
statuspage.io
login.qa.braintreepayments.com
statuspage.io
apply.qa.braintreepayments.com
logs-sand.braintreepayments.com
statuspage.io
billing-registration.braintreepayments.com
panel.gateway.qa.braintreepayments.com
statuspage.io
watchtower.qwt.braintreepayments.com
statuspage.io
statuspage.io
collins.chi.braintreepayments.com
statuspage.io
login.qa.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
staging.braintreepayments.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
jabber.braintreepayments.com
mission-control.braintree-api.com
*.qa.braintreepayments.com
collins.chi.braintreepayments.com
graphql.staging.braintreepayments.com
statuspage.io
*.dev.cosmos.braintreepayments.com
Certificate
The complete raw certificate details for gateway.staging.braintreepayments.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIQAdHGh0M1A6DdGzBqEf7faTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMTA3MjkwMDAwMDBaFw0yMjA4MjQyMzU5NTla MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMREwDwYDVQQHEwhT YW4gSm9zZTEVMBMGA1UEChMMUGF5UGFsLCBJbmMuMS4wLAYDVQQDEyVnYXRld2F5 LnN0YWdpbmcuYnJhaW50cmVlcGF5bWVudHMuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA1cH546MAQSRwe+fGma46AgcvqrEyDDuf/VuUVL5y5s9D aSpmOWBokTXuW9/qEMAXlArVWPzU+e8QBgcDSHlJVf38nDaqbgSZIpjuWPgjetHP S9TzwMk58Zii8SNRo+MYF1qRPNjDsCbEKaadt/Xi4+IUovnJjUGWmwnD4+w3NLu6 euEA4bTxAl11HnNwvveggSsWIPMjV1lpb3/yCdo1AEUSSUt0o+S1XXo07VOo0UPv Mdxz2ZicH6W4COjLZJVAiPXIV3Z518XBcuhZzyhpBGxinEprM6fYZgHhnQgjIof9 CqYlKJgdFfG+Bu4wN7QQCXtoWYqSXl/6Hjup7SWKSwIDAQABo4ICUjCCAk4wHwYD VR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFB4JNAeFb/wO 4BHcqKXPPJtxmZjYMH0GA1UdEQR2MHSCJWdhdGV3YXkuc3RhZ2luZy5icmFpbnRy ZWVwYXltZW50cy5jb22CKGdhdGV3YXlhcGkuc3RhZ2luZy5icmFpbnRyZWVwYXlt ZW50cy5jb22CIWFwaS5zdGFnaW5nLmJyYWludHJlZXBheW1lbnRzLmNvbTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1Ud HwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNl cnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEy LWhhLXNlcnZlci1nNi5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEF BQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGDBggrBgEFBQcBAQR3 MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEF BQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhp Z2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIEiz7V0stlAp19ywn7tgxIt 1GpzKBmNFra1+WIKC9eZ7tSxpz2papbqR2wrUCfaX9nJBbeRTAggic2Juck3+ySz TM3MoNeliKjUbz/LtKsyF/GN77KM0v6lkGUKN4EjwR7/jkC3VspoCAjCz3OHXRaa 5atSxgdPhYLRMZsmofp8kZVTZMjHVrJ9YiLRZH936Xmu/ED/FsPlEsv2rTj6CfQp p16lK/xpZcvHjVhFEO1X/qQLCfsiZ9lBMiu8UqpiZhvmUtBQVpLmM1IQGQ6FiN2B FvYMGqQxmPtNgIuP0+mAo5XNdIO7LxCUwyMQ7Jw5FOKj+HE7WUC0gAet+E1FIw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cH546MAQSRwe+fGma46 AgcvqrEyDDuf/VuUVL5y5s9DaSpmOWBokTXuW9/qEMAXlArVWPzU+e8QBgcDSHlJ Vf38nDaqbgSZIpjuWPgjetHPS9TzwMk58Zii8SNRo+MYF1qRPNjDsCbEKaadt/Xi 4+IUovnJjUGWmwnD4+w3NLu6euEA4bTxAl11HnNwvveggSsWIPMjV1lpb3/yCdo1 AEUSSUt0o+S1XXo07VOo0UPvMdxz2ZicH6W4COjLZJVAiPXIV3Z518XBcuhZzyhp BGxinEprM6fYZgHhnQgjIof9CqYlKJgdFfG+Bu4wN7QQCXtoWYqSXl/6Hjup7SWK SwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2418444672921743164676774169438773097 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayPal, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gateway.staging.braintreepayments.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26984412152374233903955814490211080275700397044769047555194704282568184386143964616238874237051631063588513947246838260854953369664109419117722050008185496333901264447477904028241482021222250789391623327094141637985259379578513689896256450732787453268361528608335964626989326712232503437168766197321354552131883342222216648950807386082071914858594065423356217804366248961519238489474695149257740811805093723065725782246076578115571108929305727022599686151387003328550442202466884198228021585973890219398647062697033762211713395250773263549709645539921007906395040678927725632222492745685757927505896203072447325768267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1e093407856ffc0ee011dca8a5cf3c9b719998d8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.staging.braintreepayments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewayapi.staging.braintreepayments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.braintreepayments.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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