*.ct.egov.com
- NIC Services, LLC -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0a:0f:fb:dd:ae:58:4c:b7:f5:31:ea:0a:1b:4b:ab:5c was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
NIC Services, LLC
Organization:
NIC Services, LLC
State / Province:
KS
Locality: Olathe
Country: US
Locality: Olathe
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:0f:fb:dd:ae:58:4c:b7:f5:31:ea:0a:1b:4b:ab:5cSerial Number (int): 13375272858918752839476200030677478236
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 7b:30:e4:00:64:2e:8d:bd:30:38:57:5d:d1:af:31:75:32:2e:1d:3e
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 17:bb:f3:7c:ba:e7:6d:40:1b:43:d2:5c:1d:1f:d1:95:8d:78:50:ab
Fingerprint (sha256): 09:d2:64:91:fa:a6:12:4a:88:be:96:41:62:b7:b3:ec:fe:61:20:c0:f9:46:02:59:f5:c6:0b:17:fc:a1:7e:0a
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.ct.egov.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ct.egov.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ct.egov.com
ct.egov.com
ct.egov.com
Other certificates including the domain name egov.com
(limited to 100 certificates)
statuspage.io
cwp.status.symantec.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
*.test.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.qa.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
statuspage.io
mail.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.telegov.egov.com
statuspage.io
statuspage.io
*.ct.egov.com
nws.corp.egov.com
webext.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.pa.egov.com
maintenance.blackbaud.com
maintenance.blackbaud.com
statuspage.io
stg-auth.abetter.md.egov.com
*.prod.oneoutdoor.egov.com
*.uat.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
nws.ut.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
cwp.status.symantec.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
*.test.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.qa.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
statuspage.io
mail.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.telegov.egov.com
statuspage.io
statuspage.io
*.ct.egov.com
nws.corp.egov.com
webext.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.pa.egov.com
maintenance.blackbaud.com
maintenance.blackbaud.com
statuspage.io
stg-auth.abetter.md.egov.com
*.prod.oneoutdoor.egov.com
*.uat.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
nws.ut.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
Certificate
The complete raw certificate details for *.ct.egov.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzzCCBbegAwIBAgIQCg/73a5YTLf1MeoKG0urXDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xOTA0MTkwMDAwMDBaFw0yMTA1MjExMjAwMDBa MF8xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJLUzEPMA0GA1UEBxMGT2xhdGhlMRow GAYDVQQKExFOSUMgU2VydmljZXMsIExMQzEWMBQGA1UEAwwNKi5jdC5lZ292LmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL+0ookZvYvTpUCiF6Bj 7WhLlWvq8+gW6Og+nk0OP4D3qzGRCZWP/IhIcby+YjAdBsKu9d20/MWynH6oQ6R7 fg57BJDUKCYASmus0ShCyGaH4vz+OmXOGY68qQ7o6k6YKGFyp6y8DnW0XjaqCIAj 0u9C6lZAM2R8o2DmgcV3b3uNVsfRmktAPjY3C7ReiBolO4Yfvd+BwOVbzUrJpqGn nzZLjUXbhPiv7xHPc7eiuo1rmP/R8evp51MWgtrnNZvpG+r1RHcvDxnrGPB0BthE dfsy4eSKhZ82plGdVMpgBxum2bAsllwkhQ2L4wbp71SSmuq7qtgYtUm/Xg496yn9 kE8CAwEAAaOCA3QwggNwMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7 MB0GA1UdDgQWBBR7MOQAZC6NvTA4V13RrzF1Mi4dPjAlBgNVHREEHjAcgg0qLmN0 LmVnb3YuY29tggtjdC5lZ292LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9j cmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0 dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwTAYD VR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFo dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3Vy YW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSC AW0EggFpAWcAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWo2 zTqCAAAEAwBHMEUCIQD5R5JpojrwpVtx/0Q/oC7Yr6seMoXpojAtzWh98hwH6QIg bHD65Ih4zr2DpC7zyDexK0gY4FOKIjiZvJjxR8XJk+YAdQCHdb/nWXz4jEOZX73z bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWo2zTuRAAAEAwBGMEQCIDXe9lNlLr+QxIN1 9aVEPX+rF3HGW6OKCNFs8WFIbpjmAiAvhluJ0BbcpWOCOuRAvFvQnUhF7Mtut8NJ gnhBkPH6rgB2AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABajbN Of0AAAQDAEcwRQIgCK32dNydiuEdv7eLqnbeuobP9REkXgpP5RSUR1hUR5ICIQDl TXvpX0w8JPxj1Cshh6Gg7BbzZuCZTVDY9yDaEnpBqTANBgkqhkiG9w0BAQsFAAOC AQEAl16razIVJSxaDp5g61rkFehRWPM2GqELnf4YQmDZH6QWuk2nYCpCZ7scAktx Ss7BnLI/qUR8NuzNKXEmOajfIXUUREoxmc0yqiyCqIw9RKIftc8zR9I37lMqSfn0 MdLqlE6qCFZrp5QeDpx3pFWGM7sTdTry960hx3RwAhQlz2ibHWe3l/4FJZfDmGSF NJy44gvC6p1e9SShLikwr3PR3EJHZVaawTywsC4khaE+6hCagdHpT8UXI/H6FqOp ZUErS/QQSVHjNz/rBCktLgORo9ueslccAL0EHlorOCxjRMLwjUjOyYNnTnmihUub 4hXhbfLOIvtcNgqvMNI63cnaqg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7SiiRm9i9OlQKIXoGPt aEuVa+rz6Bbo6D6eTQ4/gPerMZEJlY/8iEhxvL5iMB0Gwq713bT8xbKcfqhDpHt+ DnsEkNQoJgBKa6zRKELIZofi/P46Zc4ZjrypDujqTpgoYXKnrLwOdbReNqoIgCPS 70LqVkAzZHyjYOaBxXdve41Wx9GaS0A+NjcLtF6IGiU7hh+934HA5VvNSsmmoaef NkuNRduE+K/vEc9zt6K6jWuY/9Hx6+nnUxaC2uc1m+kb6vVEdy8PGesY8HQG2ER1 +zLh5IqFnzamUZ1UymAHG6bZsCyWXCSFDYvjBunvVJKa6ruq2Bi1Sb9eDj3rKf2Q TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13375272858918752839476200030677478236 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Olathe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIC Services, LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ct.egov.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24200590639768428021948144815402998883269801852847038348814453114048866120345836253495274277584808017065893154486338874246613873968800088498269987304547076361068491333254058612987120825386875219818372695855935236420240542050384403017091075343849128146377895147502361425827124924915863110518994739116869569428416337579983943409633326243683972276914199043359785913774456482100593792390236992393965983093883302335085381783252361048189744775912023888645088741637985905177139492344642290134876914189698716577684764309171303304152369692926187234786192451649998254104395112217132823990723357064177194984635688908737744834639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7b30e400642e8dbd3038575dd1af3175322e1d3e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ct.egov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct.egov.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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