fitness-trader.com
- CloudFlare, Inc. -
Issued by CloudFlare Inc RSA CA-1
About this certificate
This digital certificate with serial number 0b:90:aa:7b:df:da:1b:38:d4:67:5c:1d:4b:fb:75:83 was issued on by CloudFlare, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:90:aa:7b:df:da:1b:38:d4:67:5c:1d:4b:fb:75:83Serial Number (int): 15372656525238531389989812406524278147
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0c:96:10:fc:0c:5d:3d:6f:be:17:37:0e:6c:9c:d1:a3:91:d8:ab:ec
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0
Fingerprint (sha1): 4b:5a:c2:ad:43:c0:6a:68:48:1f:4b:f6:ec:81:8a:93:09:60:31:68
Fingerprint (sha256): 0a:39:26:d0:2e:0b:28:de:d5:13:66:a9:49:5d:97:0f:55:5c:33:e6:bb:06:da:3b:d0:a5:9a:80:65:d9:fe:33
Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl
Check the revocation status for certificate fitness-trader.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fitness-trader.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.fitness-trader.com
fitness-trader.com
www.fitness-trader.com
fitness-trader.com
www.fitness-trader.com
Other certificates including the domain name fitness-trader.com
(limited to 100 certificates)
catalogues.meister.com
webkiosk.wonendoejezo.com
webkiosk.wonendoejezo.com
epaper.abakus-magdeburg.de
journal.flyskywork.com
catalog.sogears.com
fitness-trader.com
webkiosk.dein-typ.de
catalogues.meister.com
kataloge.quester.at
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
fitness-trader.com
fitness-trader.com
ssl.yumpu.com
kataloge.quester.at
ssl.yumpu.com
kataloge.quester.at
ssl.yumpu.com
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
webkiosk.wonendoejezo.com
tennis.yumpu100.com
www.fitness-trader.com
webkiosk.reven.de
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
catalogues.meister.com
fitness-trader.com
fitness-trader.com
ssl.yumpu.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
catalogues.meister.com
kataloge.quester.at
catalog.sogears.com
berliner-kurier.kiosk.plus
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
ssl.yumpu.com
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
ssl.yumpu.com
webkiosk.wonendoejezo.com
berliner-kurier.kiosk.plus
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
webkiosk.wonendoejezo.com
kataloge.quester.at
webkiosk.baeckereibuettner.de
ssl.yumpu.com
fitness-trader.com
www.magazine-kraftquelle-bgl.de
catalog.sogears.com
www.fitness-trader.com
*.fitness-trader.com
gigdesarrollosinmobiliarios.jms.com.mx
colinasdecalifornia.jms.com.mx
berliner-kurier.kiosk.plus
tennis.yumpu100.com
tennis.yumpu100.com
catalogues.meister.com
www.magazine-kraftquelle-bgl.de
berliner-kurier.kiosk.plus
fitness-trader.com
elektrosystemyonline.pl
tennis.yumpu100.com
kataloge.grimm-reisen.de
webkiosk.fitness-trader.com
euflor.mediaflip.de
tennis.yumpu100.com
webkiosk.wonendoejezo.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
www.magazine-kraftquelle-bgl.de
kataloge.fuerholz.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.sossenheimer-wochenblatt.de
kataloge.quester.at
webkiosk.risiko-manager.com
broschueren.noerr.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.wonendoejezo.com
berliner-zeitung.kiosk.plus
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
epaper.rinsekit.de
kiosk.greater.sydney
berliner-kurier.kiosk.plus
epaper.swecon-baumaschinen.de
webkiosk.enzazaden.com
broschueren.noerr.com
elektrosystemyonline.pl
webkiosk.reven.de
kataloge.quester.at
kataloge.quester.at
ssl.yumpu.com
brochures.noerr.com
catalogues.meister.com
webkiosk.wonendoejezo.com
webkiosk.wonendoejezo.com
epaper.abakus-magdeburg.de
journal.flyskywork.com
catalog.sogears.com
fitness-trader.com
webkiosk.dein-typ.de
catalogues.meister.com
kataloge.quester.at
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
fitness-trader.com
fitness-trader.com
ssl.yumpu.com
kataloge.quester.at
ssl.yumpu.com
kataloge.quester.at
ssl.yumpu.com
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
webkiosk.wonendoejezo.com
tennis.yumpu100.com
www.fitness-trader.com
webkiosk.reven.de
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
catalogues.meister.com
fitness-trader.com
fitness-trader.com
ssl.yumpu.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
catalogues.meister.com
kataloge.quester.at
catalog.sogears.com
berliner-kurier.kiosk.plus
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
ssl.yumpu.com
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
ssl.yumpu.com
webkiosk.wonendoejezo.com
berliner-kurier.kiosk.plus
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
webkiosk.wonendoejezo.com
kataloge.quester.at
webkiosk.baeckereibuettner.de
ssl.yumpu.com
fitness-trader.com
www.magazine-kraftquelle-bgl.de
catalog.sogears.com
www.fitness-trader.com
*.fitness-trader.com
gigdesarrollosinmobiliarios.jms.com.mx
colinasdecalifornia.jms.com.mx
berliner-kurier.kiosk.plus
tennis.yumpu100.com
tennis.yumpu100.com
catalogues.meister.com
www.magazine-kraftquelle-bgl.de
berliner-kurier.kiosk.plus
fitness-trader.com
elektrosystemyonline.pl
tennis.yumpu100.com
kataloge.grimm-reisen.de
webkiosk.fitness-trader.com
euflor.mediaflip.de
tennis.yumpu100.com
webkiosk.wonendoejezo.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
www.magazine-kraftquelle-bgl.de
kataloge.fuerholz.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.sossenheimer-wochenblatt.de
kataloge.quester.at
webkiosk.risiko-manager.com
broschueren.noerr.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.wonendoejezo.com
berliner-zeitung.kiosk.plus
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
epaper.rinsekit.de
kiosk.greater.sydney
berliner-kurier.kiosk.plus
epaper.swecon-baumaschinen.de
webkiosk.enzazaden.com
broschueren.noerr.com
elektrosystemyonline.pl
webkiosk.reven.de
kataloge.quester.at
kataloge.quester.at
ssl.yumpu.com
brochures.noerr.com
catalogues.meister.com
Certificate
The complete raw certificate details for fitness-trader.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIQC5Cqe9/aGzjUZ1wdS/t1gzANBgkqhkiG9w0BAQsFADBv MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lz Y28xGTAXBgNVBAoTEENsb3VkRmxhcmUsIEluYy4xIDAeBgNVBAMTF0Nsb3VkRmxh cmUgSW5jIFJTQSBDQS0xMB4XDTE4MTExMzAwMDAwMFoXDTE5MTExMzEyMDAwMFow ajELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRYwFAYDVQQHEw1TYW4gRnJhbmNp c2NvMRkwFwYDVQQKExBDbG91ZEZsYXJlLCBJbmMuMRswGQYDVQQDExJmaXRuZXNz LXRyYWRlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoZay xWEF4qPv+iE7kpVDZDVEv2zOV9gTN0Q5eCmjAJSvIDzc8l+t34iaHZJwHIzLdPWY cp8FjNEc/n1M75ZLLYqo1lLf4rnNlUs/HWbe4hivHdeSt37k9/figMkBNQlFusoO +WsE9A1aosGwPNfoUOIhkGxsbsq+q0oBA15bzQCxSsQVuRFybBAXrbRTzFgqXW0m pJnFxDoQ0+aUPTw9wm07TVm0o77zxWz/3hdaS1i8DHGG3r0sru7OK6J2x+G9wpAV fETAEEBWRYHeT37iKQd4vkL62ii1iT2270mi9kXKXw4Jw9O/A09PxMaO9QgHHbV+ dX+rgmNeRgNrr+CXAgMBAAGjggIkMIICIDAfBgNVHSMEGDAWgBSRBYrfTCLGbYuU TBZFfu5vAvu3wDAdBgNVHQ4EFgQUDJYQ/AxdPW++FzcObJzRo5HYq+wwSwYDVR0R BEQwQoIUKi5maXRuZXNzLXRyYWRlci5jb22CEmZpdG5lc3MtdHJhZGVyLmNvbYIW d3d3LmZpdG5lc3MtdHJhZGVyLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMHkGA1UdHwRyMHAwNqA0oDKGMGh0dHA6Ly9j cmwzLmRpZ2ljZXJ0LmNvbS9DbG91ZEZsYXJlSW5jUlNBQ0ExLmNybDA2oDSgMoYw aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0Nsb3VkRmxhcmVJbmNSU0FDQTEuY3Js MEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHYGCCsGAQUFBwEBBGowaDAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEAGCCsGAQUFBzAC hjRodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vQ2xvdWRGbGFyZUluY1JTQUNB LTEuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAEgC3/x/Sxer99hueMD8bW6yiKveQuLt7JGJrhzniH1Yp62R 0TUleX7yP5PQbO4xSGZT9PDm65s6f4Wut8vCpXJfddhFdCZMY74FP8ttrwwYZw1/ gLfiC1RCbdcgmyEALqwRqjKNBRdYUH8bfLwP4WbdWIgpvj3OnLEt2ngoQDGaKrso iqasVlyqRiqyoB77y//X8Aw7/1Ri+UdpeCGnmQfuNQ4ELzkE+COX0FFOfmnbFBDJ ehlXnBO5LtIKlbcy3/g0H7IgJcsj9NoBT9UN+HhCiftMvRYKurXxn/K7x511+6bS 0FGQ85vosB0PdUTWweP0JUHVrz/5IBCc0KBG+wM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KGWssVhBeKj7/ohO5KV Q2Q1RL9szlfYEzdEOXgpowCUryA83PJfrd+Imh2ScByMy3T1mHKfBYzRHP59TO+W Sy2KqNZS3+K5zZVLPx1m3uIYrx3Xkrd+5Pf34oDJATUJRbrKDvlrBPQNWqLBsDzX 6FDiIZBsbG7KvqtKAQNeW80AsUrEFbkRcmwQF620U8xYKl1tJqSZxcQ6ENPmlD08 PcJtO01ZtKO+88Vs/94XWktYvAxxht69LK7uziuidsfhvcKQFXxEwBBAVkWB3k9+ 4ikHeL5C+tootYk9tu9JovZFyl8OCcPTvwNPT8TGjvUIBx21fnV/q4JjXkYDa6/g lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15372656525238531389989812406524278147 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fitness-trader.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27347156213343977410032380163918206850853410536726965779729690686576064135911138215897297227731666628744667034008486987684114298851632782054794322687995668028764573356961621093450414737222879901966663138209691298437474384292218473959994277103578796368129440408247873808839787528099417219631965146110179355341608829486001886474736946853015023643674051492069905549958526438210283777928643551823214447435455120954154000350449364888414391163920373639704388427382402345881606958506363155110663707615540449423589123927878736240941309222713419112076593767974183191793520827662710863338935651837089260369253717655618927452311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c9610fc0c5d3d6fbe17370e6c9cd1a391d8abec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitness-trader.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness-trader.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitness-trader.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004802dffc7f4b17abf7d86e78c0fc6d6eb288abde42e2edec9189ae1ce7887d58a7ad91d13525797ef23f93d06cee31486653f4f0e6eb9b3a7f85aeb7cbc2a5725f75d84574264c63be053fcb6daf0c18670d7f80b7e20b54426dd7209b21002eac11aa328d051758507f1b7cbc0fe166dd588829be3dce9cb12dda782840319a2abb288aa6ac565caa462ab2a01efbcbffd7f00c3bff5462f947697821a79907ee350e042f3904f82397d0514e7e69db1410c97a19579c13b92ed20a95b732dff8341fb22025cb23f4da014fd50df8784289fb4cbd160abab5f19ff2bbc79d75fba6d2d05190f39be8b01d0f7544d6c1e3f42541d5af3ff920109cd0a046fb03