*.nmusd.us
- Newport-Mesa Unified School District -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0f:0d:7d:ba:03:d8:af:5f:7b:57:30:7e:27:09:c1:7c was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Newport-Mesa Unified School District
Organization:
Newport-Mesa Unified School District
State / Province:
California
Locality: Costa Mesa
Country: US
Locality: Costa Mesa
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:0d:7d:ba:03:d8:af:5f:7b:57:30:7e:27:09:c1:7cSerial Number (int): 20008469834763786146661398168319148412
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b9:f8:75:da:b3:c1:15:22:7c:27:b7:86:5d:d9:81:5d:35:f1:d2:03
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): df:aa:8e:0d:00:4a:b1:40:a6:6e:9c:fe:57:48:7c:0d:a4:4f:c1:05
Fingerprint (sha256): 09:86:99:24:a6:3c:4a:5f:a4:b0:84:2a:54:22:b0:f3:a5:dd:74:2f:da:d8:ca:6e:a9:e4:7d:3a:13:36:c7:c2
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate *.nmusd.us
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nmusd.us
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nmusd.us
nmusd.us
nmusd.us
Other certificates including the domain name nmusd.us
(limited to 100 certificates)
cmhs.nmusd.us
nhhs.nmusd.us
adams.nmusd.us
tewinkle.nmusd.us
andersen.nmusd.us
ensign.nmusd.us
*.nmusd.us
nmusd.us
cmhs.nmusd.us
backbay.nmusd.us
*.nmusd.us
kaiser.nmusd.us
sonora.nmusd.us
harborview.nmusd.us
nmusd.us
lincoln.nmusd.us
*.nmusd.us
wilson.nmusd.us
backbay.nmusd.us
web.nmusd.us
davis.nmusd.us
tewinkle.nmusd.us
web.nmusd.us
web.nmusd.us
rea.nmusd.us
montevista.nmusd.us
mariners.nmusd.us
montevista.nmusd.us
nce.nmusd.us
backbay.nmusd.us
collegepark.nmusd.us
eastbluff.nmusd.us
killybrooke.nmusd.us
cdmms.nmusd.us
*.nmusd.us
*.nmusd.us
california.nmusd.us
kaiser.nmusd.us
*.nmusd.us
estancia.nmusd.us
killybrooke.nmusd.us
sonora.nmusd.us
web.nmusd.us
*.nmusd.us
newportel.nmusd.us
ensign.nmusd.us
lincoln.nmusd.us
*.nmusd.us
davis.nmusd.us
cdm.nmusd.us
pomona.nmusd.us
*.nmusd.us
woodland.nmusd.us
*.nmusd.us
nce.nmusd.us
estancia.nmusd.us
kaiser.nmusd.us
*.nmusd.us
nhhs.nmusd.us
backbay.nmusd.us
cdm.nmusd.us
mariners.nmusd.us
montevista.nmusd.us
*.nmusd.us
backbay.nmusd.us
killybrooke.nmusd.us
kaiser.nmusd.us
cdmms.nmusd.us
*.nmusd.us
adams.nmusd.us
california.nmusd.us
andersen.nmusd.us
rea.nmusd.us
estancia.nmusd.us
lincoln.nmusd.us
*.nmusd.us
whittier.nmusd.us
davismagnet.nmusd.us
pomona.nmusd.us
victoria.nmusd.us
*.nmusd.us
*.nmusd.us
cdmms.nmusd.us
cmhs.nmusd.us
victoria.nmusd.us
kaiser.nmusd.us
nce.nmusd.us
ensign.nmusd.us
paularino.nmusd.us
pomona.nmusd.us
*.nmusd.us
killybrooke.nmusd.us
web.nmusd.us
adams.nmusd.us
woodland.nmusd.us
ensign.nmusd.us
davis.nmusd.us
*.nmusd.us
web.nmusd.us
mariners.nmusd.us
nhhs.nmusd.us
adams.nmusd.us
tewinkle.nmusd.us
andersen.nmusd.us
ensign.nmusd.us
*.nmusd.us
nmusd.us
cmhs.nmusd.us
backbay.nmusd.us
*.nmusd.us
kaiser.nmusd.us
sonora.nmusd.us
harborview.nmusd.us
nmusd.us
lincoln.nmusd.us
*.nmusd.us
wilson.nmusd.us
backbay.nmusd.us
web.nmusd.us
davis.nmusd.us
tewinkle.nmusd.us
web.nmusd.us
web.nmusd.us
rea.nmusd.us
montevista.nmusd.us
mariners.nmusd.us
montevista.nmusd.us
nce.nmusd.us
backbay.nmusd.us
collegepark.nmusd.us
eastbluff.nmusd.us
killybrooke.nmusd.us
cdmms.nmusd.us
*.nmusd.us
*.nmusd.us
california.nmusd.us
kaiser.nmusd.us
*.nmusd.us
estancia.nmusd.us
killybrooke.nmusd.us
sonora.nmusd.us
web.nmusd.us
*.nmusd.us
newportel.nmusd.us
ensign.nmusd.us
lincoln.nmusd.us
*.nmusd.us
davis.nmusd.us
cdm.nmusd.us
pomona.nmusd.us
*.nmusd.us
woodland.nmusd.us
*.nmusd.us
nce.nmusd.us
estancia.nmusd.us
kaiser.nmusd.us
*.nmusd.us
nhhs.nmusd.us
backbay.nmusd.us
cdm.nmusd.us
mariners.nmusd.us
montevista.nmusd.us
*.nmusd.us
backbay.nmusd.us
killybrooke.nmusd.us
kaiser.nmusd.us
cdmms.nmusd.us
*.nmusd.us
adams.nmusd.us
california.nmusd.us
andersen.nmusd.us
rea.nmusd.us
estancia.nmusd.us
lincoln.nmusd.us
*.nmusd.us
whittier.nmusd.us
davismagnet.nmusd.us
pomona.nmusd.us
victoria.nmusd.us
*.nmusd.us
*.nmusd.us
cdmms.nmusd.us
cmhs.nmusd.us
victoria.nmusd.us
kaiser.nmusd.us
nce.nmusd.us
ensign.nmusd.us
paularino.nmusd.us
pomona.nmusd.us
*.nmusd.us
killybrooke.nmusd.us
web.nmusd.us
adams.nmusd.us
woodland.nmusd.us
ensign.nmusd.us
davis.nmusd.us
*.nmusd.us
web.nmusd.us
mariners.nmusd.us
Certificate
The complete raw certificate details for *.nmusd.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHsjCCBpqgAwIBAgIQDw19ugPYr197VzB+JwnBfDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMTIxMDAwMDAwWhcN MjAxMjE2MTIwMDAwWjB7MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTETMBEGA1UEBxMKQ29zdGEgTWVzYTEtMCsGA1UEChMkTmV3cG9ydC1NZXNhIFVu aWZpZWQgU2Nob29sIERpc3RyaWN0MRMwEQYDVQQDDAoqLm5tdXNkLnVzMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzc3IxxTlf3sQ9XlC4jOzyWt5jPjz KI9lLumVgDDcwZlG4+s3aK252oBaPuTgz0CFePNilx1NcQ+YtPLL8Pumb5ri08Nq v8Y2bc8vK9UufvfxTFVYat1PiBCDZ1D0kNxIpaCQXbyFDQJjtqDtj9Xogwdw2IrH P7BKGmlpNSPbk9f+qVIcLs9QmWvtruYnTSnZW9peJBupyFQ18g2CPSJLC2cb80fy cU26gULbIy8xHveOb/sdSJ9L+B+/SG8HKNhPxB0eoayur2S/78liH2Kqek0zI93y b9cNHwavdnLqDFtXYP2sTVxf6StAi6vzck9KbFlYkL8qFQ5sauwpy78DpN6XEBI1 tcvKWV8hxQwQVBWLWXE4ZSh78MukaD157yjkki3gy6lDEGgmmuWww7D2Pi2eWJ15 Sk7+EYX+L7/8yi4M3AlxOFcQ2J5KdMXW0ITAu2egXDsNXs+6qPVhwJBGbAOQ0ZiV n2PqFSr5scXde/MEa0xNuY5CYfHhHp5h48yD4FOsqhBLYFqwtzK1TYa8gr+Zakwu fKtP2XMR44+EsjiNFVmdvnr+wyFi+LFzUayFCUFkRKbIp1OYyjsUStKTahz1pF+L IiSBqytBSOiltofz7J+1YP2lQ16/bGw1O7pYhJRFb7DnGVZPNluQyXVahgXgU76z 7kede+9eEKJbVXcCAwEAAaOCA14wggNaMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjn jUY4tCzhxtniMB0GA1UdDgQWBBS5+HXas8EVInwnt4Zd2YFdNfHSAzAfBgNVHREE GDAWggoqLm5tdXNkLnVzgghubXVzZC51czAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6 Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRw Oi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBD MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGG GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2Nh Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNy dDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdQCkuQmQ tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWc0Wo7mAAAEAwBGMEQCIFRj JWaJjLzAcGM+fbdh+ZCZkIdPtyy41FpFr3PhUq6pAiAZ6JNxb9tjs2FfwfpW6evK sTS4tpJFha1XxtWokfj8XAB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9e oIMPAAABZzRaj5sAAAQDAEgwRgIhAJ9wZvr3eillhv5fnJtU9/1T+zN7hKulPe21 paSCA+dyAiEAtF8kCczQmi0jt+MxBtefkqNcAJa51VoOLDwvQ+ZdyPAAdwC72d+8 H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWc0Wo8MAAAEAwBIMEYCIQCZ r9VqL3aavwc8ZFyIFd/qxP7YA8fLULA0RgtZ+fEPQAIhAN/1CtqmxewhOwbay8eQ peRcsd81/uBvH9oZU3e+WpR4MA0GCSqGSIb3DQEBCwUAA4IBAQCb29GJUpKf/RJM h4P1cCLeKOZX/VQB3eUVxxtwBwUFcM871F7mA0Luv1uzUiDXXDgDg4kMy5srznyN R4QVSWqUeqWhsAGLzyRHLxGDp+RRGV9csA4HvrFlKNgjFHcBMyMzrHGuxeaoNmdi TQzj+CJlchTp3ZmhVbREIP4pUU3yjoBEAbzJgBNzK2yihy1O9WwwhZ6OogkDg4kS euwbbvFijQpztWjBnXW7PLom6vsVU1rqML+z2r4W+S+GstBA/HNteED3y4ltVR5z Jc4A52K5PrN5Jx2s3FR3ZB/ryf8u7M8Lykaa3M/OQA7UGBqtL+we6zYUtuQOa6+1 UrEmS3fa -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzc3IxxTlf3sQ9XlC4jOz yWt5jPjzKI9lLumVgDDcwZlG4+s3aK252oBaPuTgz0CFePNilx1NcQ+YtPLL8Pum b5ri08Nqv8Y2bc8vK9UufvfxTFVYat1PiBCDZ1D0kNxIpaCQXbyFDQJjtqDtj9Xo gwdw2IrHP7BKGmlpNSPbk9f+qVIcLs9QmWvtruYnTSnZW9peJBupyFQ18g2CPSJL C2cb80fycU26gULbIy8xHveOb/sdSJ9L+B+/SG8HKNhPxB0eoayur2S/78liH2Kq ek0zI93yb9cNHwavdnLqDFtXYP2sTVxf6StAi6vzck9KbFlYkL8qFQ5sauwpy78D pN6XEBI1tcvKWV8hxQwQVBWLWXE4ZSh78MukaD157yjkki3gy6lDEGgmmuWww7D2 Pi2eWJ15Sk7+EYX+L7/8yi4M3AlxOFcQ2J5KdMXW0ITAu2egXDsNXs+6qPVhwJBG bAOQ0ZiVn2PqFSr5scXde/MEa0xNuY5CYfHhHp5h48yD4FOsqhBLYFqwtzK1TYa8 gr+ZakwufKtP2XMR44+EsjiNFVmdvnr+wyFi+LFzUayFCUFkRKbIp1OYyjsUStKT ahz1pF+LIiSBqytBSOiltofz7J+1YP2lQ16/bGw1O7pYhJRFb7DnGVZPNluQyXVa hgXgU76z7kede+9eEKJbVXcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20008469834763786146661398168319148412 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Costa Mesa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Newport-Mesa Unified School District' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nmusd.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839606434915957289874354667339354602170438116541372951425658010453914285125066532973316873033255050829046166021639665212955631589290068731653905266151456244648097031816415664698734199835743890741325240470639758271823897269330536101427992676964437842770339090917131505435610959701163353216427426288141540424688993059440706985391572952202255890423799062344772422028514413736040403446482521659364582776616540881910170522682869432841579845222793672738902292507019093083699976477664255615072815498038230408899698560894595011258978541655588353398610951692798333447831248910130684718221893653933655130343699648455346296275527863519270921169067790272235181635756852047929026030876957802402600167391400768946655863919595628952365805326146521940561019887756868051243055428481639418061168451925563586517086842029546293862840808428780172970687953694898108695904611823541960664339271079421323828020042644655931350027438936046863163148113510571249290760660694242444264438181078506967302041298436541163095807066691900681376758641162252502891805997351481284177134456606368427807699557756456764275187616005073045917711379017986017701858286553678530334169474757896038012331004813002661303717533569898539970064671897264623942373802069207749930576991607 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b9f875dab3c115227c27b7865dd9815d35f1d203 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmusd.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmusd.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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