webext.egov.com
- NIC, Inc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 07:b1:d4:15:fc:2a:24:b9:7d:db:77:01:f5:49:33:6a was issued on by DigiCert Inc.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- SAN DNSName contains duplicate values (awslabs certlint)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
NIC, Inc
Organization:
NIC, Inc
State / Province:
KS
Locality: Olathe
Country: US
Locality: Olathe
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:b1:d4:15:fc:2a:24:b9:7d:db:77:01:f5:49:33:6aSerial Number (int): 10227934127123633340570295366341702506
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: bb:47:0b:9a:83:b4:50:e2:d1:aa:61:72:ea:d3:bb:82:66:b2:09:a4
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): c7:61:52:36:80:a3:bf:13:d5:97:91:e3:13:2b:01:da:85:5d:70:bd
Fingerprint (sha256): 0a:53:ea:98:4c:18:ac:da:05:60:83:2a:d7:67:e0:aa:35:9a:56:61:2d:12:33:ca:d9:89:59:4e:ee:24:28:46
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g2.crl
Check the revocation status for certificate webext.egov.com
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webext.egov.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webext.egov.com
lyncdiscoverinternal.egov.com
dialin.egov.com
meet.nicusa.com
meet.egov.com
meet.ad.cdc.nicusa.com
Lyncdiscover.ad.cdc.nicusa.com
Lyncdiscover.nicusa.com
Lyncdiscover.egov.com
lindiscoverinternal.egov.com
lyncdiscover.ad.cdc.nicusa.com
lyncdiscover.nicusa.com
lyncdiscover.egov.com
lyncdiscoverinternal.egov.com
dialin.egov.com
meet.nicusa.com
meet.egov.com
meet.ad.cdc.nicusa.com
Lyncdiscover.ad.cdc.nicusa.com
Lyncdiscover.nicusa.com
Lyncdiscover.egov.com
lindiscoverinternal.egov.com
lyncdiscover.ad.cdc.nicusa.com
lyncdiscover.nicusa.com
lyncdiscover.egov.com
Other certificates including the domain name egov.com
(limited to 100 certificates)
statuspage.io
cwp.status.symantec.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
*.test.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.qa.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
statuspage.io
mail.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.telegov.egov.com
statuspage.io
statuspage.io
*.ct.egov.com
nws.corp.egov.com
webext.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.pa.egov.com
maintenance.blackbaud.com
maintenance.blackbaud.com
statuspage.io
stg-auth.abetter.md.egov.com
*.prod.oneoutdoor.egov.com
*.uat.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
nws.ut.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
cwp.status.symantec.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
*.test.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.qa.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
statuspage.io
mail.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.telegov.egov.com
statuspage.io
statuspage.io
*.ct.egov.com
nws.corp.egov.com
webext.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
statuspage.io
statuspage.io
maintenance.blackbaud.com
*.pa.egov.com
maintenance.blackbaud.com
maintenance.blackbaud.com
statuspage.io
stg-auth.abetter.md.egov.com
*.prod.oneoutdoor.egov.com
*.uat.oneoutdoor.egov.com
statuspage.io
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
nws.ut.egov.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
maintenance.blackbaud.com
statuspage.io
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.oneoutdoor.egov.com
Certificate
The complete raw certificate details for webext.egov.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIQB7HUFfwqJLl923cB9UkzajANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNDA2MDYwMDAwMDBaFw0xNzA2MTQxMjAwMDBa MFgxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJLUzEPMA0GA1UEBxMGT2xhdGhlMREw DwYDVQQKEwhOSUMsIEluYzEYMBYGA1UEAxMPd2ViZXh0LmVnb3YuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjT2okWXC/nIwAhi6BSPwG8hChS2 0MOiKRyPXrwZB3h9ThNLLVSKoWIWDY5HczMc6z7MNJwZc7QxgmWfTFU8VeenC1sc T08XhzNpWokwiNO0cT/V2t4tscbkhM8qc7Z0xPJ9vOdJOxwfb5+NUOxfESte0VzI ZgGdezTrCasYIPDz5q8bAFJMBEGm4eDfpY9rzQy5aXtvDGQhlBo52U6/Xx7sAtbj AvMPzJY4xOJjm3EIKzkHO7LxEvb+2DTObdY/bvWGhQgBrNvRARH7a9Y4SFtI6VYK H6meDUrTfUnrsacRJhhTxJubAxyi7tQmNeE50h9M++w2fV/iPdUwfKIzHwIDAQAB o4IDCjCCAwYwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0O BBYEFLtHC5qDtFDi0aphcurTu4JmsgmkMIIBRAYDVR0RBIIBOzCCATeCD3dlYmV4 dC5lZ292LmNvbYIdbHluY2Rpc2NvdmVyaW50ZXJuYWwuZWdvdi5jb22CD2RpYWxp bi5lZ292LmNvbYIPbWVldC5uaWN1c2EuY29tgg1tZWV0LmVnb3YuY29tghZtZWV0 LmFkLmNkYy5uaWN1c2EuY29tgh5MeW5jZGlzY292ZXIuYWQuY2RjLm5pY3VzYS5j b22CF0x5bmNkaXNjb3Zlci5uaWN1c2EuY29tghVMeW5jZGlzY292ZXIuZWdvdi5j b22CHGxpbmRpc2NvdmVyaW50ZXJuYWwuZWdvdi5jb22CHmx5bmNkaXNjb3Zlci5h ZC5jZGMubmljdXNhLmNvbYIXbHluY2Rpc2NvdmVyLm5pY3VzYS5jb22CFWx5bmNk aXNjb3Zlci5lZ292LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRp Z2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nMi5jcmwwNKAyoDCGLmh0dHA6Ly9j cmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nMi5jcmwwQgYDVR0gBDsw OTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0 MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBACSRE9Luhhb8uIPVGzun GK/6PC4YwDdjPxlqFjdQK/7ujT70GUyEGAbBUYnapdv+9+8m5Ib71eJ0ndKoWPCD uGQETdEMHgGtxDxcBNQBh3mKCbjryRDk11XeRxFjXYyFW0be7vQmOuQQOF1YH/5d cOSasA/0uJrZwfsYG8lD1SP+lr6UvhZ61snrDlXvIVdp/HUVUiM9bN1nheKn2A3x bw8CGpBu1bIBvR4KYNGxRQPzxuTzu9mQhEbPnErLKgRkPxEJSgiEX6x2ltOdj6xO 8v0Np/6OjO3XTn/c/KoLtNAGfcfeeBSD0OOF1O2J4wSqzcwrqC3q88AVeN8ZOuGG yOk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjT2okWXC/nIwAhi6BSP wG8hChS20MOiKRyPXrwZB3h9ThNLLVSKoWIWDY5HczMc6z7MNJwZc7QxgmWfTFU8 VeenC1scT08XhzNpWokwiNO0cT/V2t4tscbkhM8qc7Z0xPJ9vOdJOxwfb5+NUOxf ESte0VzIZgGdezTrCasYIPDz5q8bAFJMBEGm4eDfpY9rzQy5aXtvDGQhlBo52U6/ Xx7sAtbjAvMPzJY4xOJjm3EIKzkHO7LxEvb+2DTObdY/bvWGhQgBrNvRARH7a9Y4 SFtI6VYKH6meDUrTfUnrsacRJhhTxJubAxyi7tQmNeE50h9M++w2fV/iPdUwfKIz HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10227934127123633340570295366341702506 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Olathe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIC, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webext.egov.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25021301615914411468540371148344322969990958402627647463591894704671193098937505873756921479269258993379253233205349653941701039085924183822076881990194217932400916922396212756343773795916001183812465244216613601980595716768659974308696387317805033631516934915383791388533161999674828965018595667112552929024764849066398708593373961630788839270631541727405650089367083567657990607118808014712555916270507988425969091794241026974080141423857347869059559144037299650164837094235791927016821612388288875882776055971474976708931164815336267277352537900726854648784970155850999019888473251795295540655002574324688411046687 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bb470b9a83b450e2d1aa6172ead3bb8266b209a4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webext.egov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.egov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.egov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.nicusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.egov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ad.cdc.nicusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ad.cdc.nicusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.nicusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.egov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindiscoverinternal.egov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ad.cdc.nicusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.nicusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.egov.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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