rhs.rochester.wednet.edu
- Cloudflare, Inc. -
Issued by Cloudflare Inc RSA CA-2
About this certificate
This digital certificate with serial number 0b:7a:fe:fa:aa:9d:36:20:c0:31:ae:8f:8a:70:db:09 was issued on by Cloudflare, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Cloudflare, Inc.
Organization:
Cloudflare, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
Cloudflare, Inc.
Organization:
Cloudflare, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:7a:fe:fa:aa:9d:36:20:c0:31:ae:8f:8a:70:db:09Serial Number (int): 15260139762257788298237765246918908681
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 96:af:4f:b8:0d:80:89:02:37:c3:1f:eb:13:79:84:74:2d:df:df:7a
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a
Fingerprint (sha1): 9e:96:dc:9d:25:ae:18:2d:8c:b4:9c:98:18:51:34:bd:9f:b8:25:60
Fingerprint (sha256): 09:97:2f:42:ba:3c:19:19:e9:fa:eb:da:bb:27:20:a9:80:96:06:ae:a5:f2:60:16:2d:4a:27:08:ca:88:d4:7a
Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl
Check the revocation status for certificate rhs.rochester.wednet.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rhs.rochester.wednet.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rhs.rochester.wednet.edu
Other certificates including the domain name wednet.edu
(limited to 100 certificates)
warden.wednet.edu
admin-adu.slzusd.org
tech.sw.wednet.edu
renplace.osd.wednet.edu
hoodcanal.wednet.edu
library.mukilteo.wednet.edu
webauth.wsd73.wednet.edu
Payment.ycs.wednet.edu
www.rochester.wednet.edu
ehs.enumclaw.wednet.edu
cas.osd.wednet.edu
www.edmonds.wednet.edu
*.upsd.wednet.edu
Radius.centralia.wednet.edu
library.adserv.osd.wednet.edu
*.osd.wednet.edu
www.inchelium.wednet.edu
bke.enumclaw.wednet.edu
www.rainier.wednet.edu
hyak.oesd.wednet.edu
wireless.camas.wednet.edu
www.bradleyschools.org
tech.centralia.wednet.edu
psc.upsd.wednet.edu
mail.psd267.org
www.mtbaker.wednet.edu
destiny.sno.wednet.edu
nemo.adserv.osd.wednet.edu
waterville.wednet.edu
payments.monroe.wednet.edu
vpnportal.sno.wednet.edu
us-east-1-san2.blackboard.com
swiftclassroom.com
brown.osd.wednet.edu
safari.camas.wednet.edu
triton.oesdmail.wednet.edu
www.sw.wednet.edu
www.orondo.wednet.edu
heart.rochester.wednet.edu
www.tucna.wednet.edu
www.qsd.wednet.edu
nemo.adserv.osd.wednet.edu
ems.enumclaw.wednet.edu
sts.mukilteo.wednet.edu
courseguide.issaquah.wednet.edu
mccleary.wednet.edu
warden.wednet.edu
aspen.mukilteo.wednet.edu
*.gfalls.wednet.edu
SSD-EXCHCAS.sno.wednet.edu
www.klickitat.wednet.edu
admin.eceap.gsd.wednet.edu
ltes.dieringer.wednet.edu
mail.cusick.wednet.edu
bes.gobearsgo.net
tukwila.wednet.edu
touchbase.cksd.wednet.edu
ssdmedia.sno.wednet.edu
cougarmail.lwsd.wednet.edu
calendar.royal.wednet.edu
mail.camas.wednet.edu
psd.wednet.edu
cas.osd.wednet.edu
heart.rochester.wednet.edu
vpnportal.sno.wednet.edu
vpn.highland.wednet.edu
mtadams.wednet.edu
rhs.rochester.wednet.edu
meridian.wednet.edu
mtbaker.wednet.edu
files.enumclaw.wednet.edu
vpn.wsd73.wednet.edu
ohs.onysd.wednet.edu
gfes.comalisd.org
nemo.osd.wednet.edu
tls.automattic.com
*.whiteriver.wednet.edu
view-cs01.wsd73.wednet.edu
www.monte.wednet.edu
wmms.slzusd.org
lwe.edmonds.wednet.edu
washington.osd.wednet.edu
www.eatonville.wednet.edu
printcenter.mukilteo.wednet.edu
wsd73.wednet.edu
*.camas.wednet.edu
edmonds.wednet.edu
www.edmonds.wednet.edu
nemo.osd.wednet.edu
renplace.osd.wednet.edu
qsd.wednet.edu
mail.republic.wednet.edu
www.davenport.wednet.edu
psd.wednet.edu
wrsd.wednet.edu
slhs.edmonds.wednet.edu
www.mccleary.wednet.edu
library.adserv.osd.wednet.edu
admin.hs.gsd.wednet.edu
filter.qsd.wednet.edu
admin-adu.slzusd.org
tech.sw.wednet.edu
renplace.osd.wednet.edu
hoodcanal.wednet.edu
library.mukilteo.wednet.edu
webauth.wsd73.wednet.edu
Payment.ycs.wednet.edu
www.rochester.wednet.edu
ehs.enumclaw.wednet.edu
cas.osd.wednet.edu
www.edmonds.wednet.edu
*.upsd.wednet.edu
Radius.centralia.wednet.edu
library.adserv.osd.wednet.edu
*.osd.wednet.edu
www.inchelium.wednet.edu
bke.enumclaw.wednet.edu
www.rainier.wednet.edu
hyak.oesd.wednet.edu
wireless.camas.wednet.edu
www.bradleyschools.org
tech.centralia.wednet.edu
psc.upsd.wednet.edu
mail.psd267.org
www.mtbaker.wednet.edu
destiny.sno.wednet.edu
nemo.adserv.osd.wednet.edu
waterville.wednet.edu
payments.monroe.wednet.edu
vpnportal.sno.wednet.edu
us-east-1-san2.blackboard.com
swiftclassroom.com
brown.osd.wednet.edu
safari.camas.wednet.edu
triton.oesdmail.wednet.edu
www.sw.wednet.edu
www.orondo.wednet.edu
heart.rochester.wednet.edu
www.tucna.wednet.edu
www.qsd.wednet.edu
nemo.adserv.osd.wednet.edu
ems.enumclaw.wednet.edu
sts.mukilteo.wednet.edu
courseguide.issaquah.wednet.edu
mccleary.wednet.edu
warden.wednet.edu
aspen.mukilteo.wednet.edu
*.gfalls.wednet.edu
SSD-EXCHCAS.sno.wednet.edu
www.klickitat.wednet.edu
admin.eceap.gsd.wednet.edu
ltes.dieringer.wednet.edu
mail.cusick.wednet.edu
bes.gobearsgo.net
tukwila.wednet.edu
touchbase.cksd.wednet.edu
ssdmedia.sno.wednet.edu
cougarmail.lwsd.wednet.edu
calendar.royal.wednet.edu
mail.camas.wednet.edu
psd.wednet.edu
cas.osd.wednet.edu
heart.rochester.wednet.edu
vpnportal.sno.wednet.edu
vpn.highland.wednet.edu
mtadams.wednet.edu
rhs.rochester.wednet.edu
meridian.wednet.edu
mtbaker.wednet.edu
files.enumclaw.wednet.edu
vpn.wsd73.wednet.edu
ohs.onysd.wednet.edu
gfes.comalisd.org
nemo.osd.wednet.edu
tls.automattic.com
*.whiteriver.wednet.edu
view-cs01.wsd73.wednet.edu
www.monte.wednet.edu
wmms.slzusd.org
lwe.edmonds.wednet.edu
washington.osd.wednet.edu
www.eatonville.wednet.edu
printcenter.mukilteo.wednet.edu
wsd73.wednet.edu
*.camas.wednet.edu
edmonds.wednet.edu
www.edmonds.wednet.edu
nemo.osd.wednet.edu
renplace.osd.wednet.edu
qsd.wednet.edu
mail.republic.wednet.edu
www.davenport.wednet.edu
psd.wednet.edu
wrsd.wednet.edu
slhs.edmonds.wednet.edu
www.mccleary.wednet.edu
library.adserv.osd.wednet.edu
admin.hs.gsd.wednet.edu
filter.qsd.wednet.edu
Certificate
The complete raw certificate details for rhs.rochester.wednet.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIQC3r++qqdNiDAMa6PinDbCTANBgkqhkiG9w0BAQsFADBK MQswCQYDVQQGEwJVUzEZMBcGA1UEChMQQ2xvdWRmbGFyZSwgSW5jLjEgMB4GA1UE AxMXQ2xvdWRmbGFyZSBJbmMgUlNBIENBLTIwHhcNMjQwMTI0MDAwMDAwWhcNMjQx MjMxMjM1OTU5WjB4MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEW MBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEZMBcGA1UEChMQQ2xvdWRmbGFyZSwgSW5j LjEhMB8GA1UEAxMYcmhzLnJvY2hlc3Rlci53ZWRuZXQuZWR1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71+KG69cGPpCXTZRevRxGEPN4ijQXFfLOu5F I684VPTnDny3PGFI2vZB7GDyu3c9nGlOTrLdOb/ep1RGlcsJ9IcSFx0DfZ5aYhec OPcX4WnDnKIDFk7oXMi8eb45K6zlLYsbJwdhLlzoTJYvy+vogLaGNz0PU+fD3B6z 2qShEX3+CrsqtBBPCXCwRFwm+m4Oa1s5L1cITAP+9wUJV2EUekiTyeMi4WMXvnY8 ntGqDweNk5iI7qI8Kh60P3/xXm1Cb2qE+P9bxypx0jobrLBhSVeX2VacJcthG/Du N+Dboj78Ivs3LLQFJDei4lTOoigpm6OC4qNRvPchxtSgbM7D0QIDAQABo4IDXDCC A1gwHwYDVR0jBBgwFoAUGKka/LJFScFvMDQIK9mHnLAlV3owHQYDVR0OBBYEFJav T7gNgIkCN8Mf6xN5hHQt3996MCMGA1UdEQQcMBqCGHJocy5yb2NoZXN0ZXIud2Vk bmV0LmVkdTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRw Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8v Y3JsMy5kaWdpY2VydC5jb20vQ2xvdWRmbGFyZUluY1JTQUNBLTIuY3JsMDegNaAz hjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vQ2xvdWRmbGFyZUluY1JTQUNBLTIu Y3JsMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln aWNlcnQuY29tMEAGCCsGAQUFBzAChjRodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j b20vQ2xvdWRmbGFyZUluY1JTQUNBLTIuY3J0MAwGA1UdEwEB/wQCMAAwggF9Bgor BgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABjTlb0PUAAAQDAEcwRQIgCG8W1Q7IY5shf4NIVdo4z5JnTpQxGb7c BGGCSRxVPM0CIQDjxVKzo4g9uzie0nw9+5ymnJCMHrdjZCWMQP997pUuMgB2ANq2 v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjTlb0PwAAAQDAEcwRQIh AIzrabNUTe/fEFBu/KxfMqUd/FtvE/7SNYCKcY79He6tAiAUTqCIQfmZP3r2APel BG09AdQaIi2EWgAtL3GPwnPpEAB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/ KIXs+GRuAAABjTlb0WEAAAQDAEYwRAIgO1tn1WauK9jTLlW+9g/cIfBGHEKl2s12 RFS2Ra116kcCIE7Hc94lJqpkPzy5HMg8DvHtsXGvHdVOpZbrlQPmLr96MA0GCSqG SIb3DQEBCwUAA4IBAQAzaLfN/GOMcPmPNr2U/mv4nMqQVRB+pyPfibpLyDXgKw6j a2u+iLSZfd6BNxqj89BqPBJp83FOr1rE00S85tqf4RTFSkcAEi/1pJDIX5QhWR+z QxbZFsLtKb+R4rnOrYcJOfbrcYLuva9fVgLUhK7i0Ax5Yh1AW+JzayXuyMjROIIG tfvwWJtoubeu04pRQ3sr18cY/SW+qw/1ZaIZtw/L9iQrZolU3DQ4OKVR1qygcvWT 1DFdIuAjcw6lzARaqlCD35kwaPWsc2Anh8Oq6QA2fSiRdP9FOPHOqnidnLKPD7Im rWWTjPPYeAtPIaJUL2Bn+p28hctB6tVV+oTWfxSo -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71+KG69cGPpCXTZRevRx GEPN4ijQXFfLOu5FI684VPTnDny3PGFI2vZB7GDyu3c9nGlOTrLdOb/ep1RGlcsJ 9IcSFx0DfZ5aYhecOPcX4WnDnKIDFk7oXMi8eb45K6zlLYsbJwdhLlzoTJYvy+vo gLaGNz0PU+fD3B6z2qShEX3+CrsqtBBPCXCwRFwm+m4Oa1s5L1cITAP+9wUJV2EU ekiTyeMi4WMXvnY8ntGqDweNk5iI7qI8Kh60P3/xXm1Cb2qE+P9bxypx0jobrLBh SVeX2VacJcthG/DuN+Dboj78Ivs3LLQFJDei4lTOoigpm6OC4qNRvPchxtSgbM7D 0QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15260139762257788298237765246918908681 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rhs.rochester.wednet.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30218067162810278000817489770654453961265978036025759780082333896150254015070179809929326127113305052918308314586342169936343759117848039382902535231448851747441840151764674322808067989394172379208923407107885933523143982861256160481914957345443977128707368890274285592321387931667578573157680676410442035682787361227135918294070442019786230898496222531142989843484245095860202814418685892010389835812628396749630475882591427522102713946822825919703083076215988716866734301484980857321838043501940852186867915292117447014710625089537909411238201520830847837161610333002477800071793356115151363545099383423708565521361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 96af4fb80d80890237c31feb137984742ddfdf7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.rochester.wednet.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d395bd0f500000403004730450220086f16d50ec8639b217f834855da38cf92674e943119bedc046182491c553ccd022100e3c552b3a3883dbb389ed27c3dfb9ca69c908c1eb76364258c40ff7dee952e32007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d395bd0fc00000403004730450221008ceb69b3544defdf10506efcac5f32a51dfc5b6f13fed235808a718efd1deead0220144ea08841f9993f7af600f7a5046d3d01d41a222d845a002d2f718fc273e9100075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018d395bd161000004030046304402203b5b67d566ae2bd8d32e55bef60fdc21f0461c42a5dacd764454b645ad75ea4702204ec773de2526aa643f3cb91cc83c0ef1edb171af1dd54ea596eb9503e62ebf7a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003368b7cdfc638c70f98f36bd94fe6bf89cca9055107ea723df89ba4bc835e02b0ea36b6bbe88b4997dde81371aa3f3d06a3c1269f3714eaf5ac4d344bce6da9fe114c54a4700122ff5a490c85f9421591fb34316d916c2ed29bf91e2b9cead870939f6eb7182eebdaf5f5602d484aee2d00c79621d405be2736b25eec8c8d1388206b5fbf0589b68b9b7aed38a51437b2bd7c718fd25beab0ff565a219b70fcbf6242b668954dc343838a551d6aca072f593d4315d22e023730ea5cc045aaa5083df993068f5ac73602787c3aae900367d289174ff4538f1ceaa789d9cb28f0fb226ad65938cf3d8780b4f21a2542f6067fa9dbc85cb41ead555fa84d67f14a8