*.ca.granicus.com
Issued by Starfield Secure Certification Authority
About this certificate
This digital certificate with serial number 4b:4f:39:bb:02:e5:ff was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ca.granicus.com,OU=Domain Control Validated
Starfield Technologies, Inc.
Company registration number: 10688435
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 4b:4f:39:bb:02:e5:ffSerial Number (int): 21197732622558719
Serial Number lenght: 55 bits, 7 octets
SubjectKeyId: a1:ab:a2:86:5f:56:78:f3:7c:4f:70:98:61:16:60:ae:82:f3:67:63
AuthorityKeyId: 49:4b:52:27:d1:1b:bc:f2:a1:21:6a:62:7b:51:42:7a:8a:d7:d5:56
Fingerprint (sha1): f0:51:a9:01:cc:01:91:23:2d:e3:f2:80:b2:8f:23:23:0b:55:62:65
Fingerprint (sha256): 0a:58:5b:f0:78:70:24:c5:8c:f0:ca:ac:47:6e:a2:43:56:51:ea:ea:61:9f:b8:df:d8:f6:00:34:d9:66:eb:36
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sf_intermediate.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfs1-27.crl
Check the revocation status for certificate *.ca.granicus.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ca.granicus.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ca.granicus.com
ca.granicus.com
ca.granicus.com
Other certificates including the domain name granicus.com
(limited to 100 certificates)
eu1-status.mulesoft.com
jira-stage.granicus.com
5718998062727168-fe2.pantheonsite.io
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
*.ca.granicus.com
5718998062727168-fe2.pantheonsite.io
int.granicus.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.granicus.com
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
eu1-status.mulesoft.com
granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
support.granicus.com
corphelpdesk.granicus.com
vpn-prod.granicus.com
5645056174194688-fe3.pantheonsite.io
*.ca.granicus.com
*.granicus.com
*.dev.granicus.com
go.granicus.com
about.govdelivery.com
vpn2-ap-southeast-2.granicus.com
5645056174194688-fe3.pantheonsite.io
jira-stage.granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
secure01.lithium.com
go.granicus.com
eu1-status.mulesoft.com
5718998062727168-fe2.pantheonsite.io
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
info.granicus.com
www.granicus.com
san-1-s12.tlsprovisioning.exacttarget.com
secure01.lithium.com
5714142736416768-fe4.pantheonsite.io
click.granicus.com
istatus.edgenuity.net
*.granicus.com
secure02.stage.lithium.com
int.granicus.com
secure01.lithium.com
san-1-s12.tlsprovisioning.exacttarget.com
*.ca.granicus.com
secure01.lithium.com
view.ceros.com
ceros.map.fastly.net
view.ceros.com
5718998062727168-fe2.pantheonsite.io
eu1-status.mulesoft.com
secure02.stage.lithium.com
secure01.lithium.com
2fsupport.govdelivery.com
5645056174194688-fe3.pantheonsite.io
vpn2-eu-west-2.granicus.com
secure01.lithium.com
eu1-status.mulesoft.com
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
image.20210419.test1.s12.et.yellsatcloud.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
secure02.stage.lithium.com
ceros.map.fastly.net
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
eu1-status.mulesoft.com
istatus.edgenuity.net
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
secure02.stage.lithium.com
5714142736416768-fe4.pantheonsite.io
secure01.lithium.com
5690091590647808-fe2.pantheonsite.io
eu1-status.mulesoft.com
5690091590647808-fe2.pantheonsite.io
secure02.stage.lithium.com
ceros.map.fastly.net
eu1-status.mulesoft.com
view.ceros.com
secure01.lithium.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
5714142736416768-fe4.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
jira-stage.granicus.com
5718998062727168-fe2.pantheonsite.io
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
*.ca.granicus.com
5718998062727168-fe2.pantheonsite.io
int.granicus.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.granicus.com
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
eu1-status.mulesoft.com
granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
support.granicus.com
corphelpdesk.granicus.com
vpn-prod.granicus.com
5645056174194688-fe3.pantheonsite.io
*.ca.granicus.com
*.granicus.com
*.dev.granicus.com
go.granicus.com
about.govdelivery.com
vpn2-ap-southeast-2.granicus.com
5645056174194688-fe3.pantheonsite.io
jira-stage.granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
secure01.lithium.com
go.granicus.com
eu1-status.mulesoft.com
5718998062727168-fe2.pantheonsite.io
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
info.granicus.com
www.granicus.com
san-1-s12.tlsprovisioning.exacttarget.com
secure01.lithium.com
5714142736416768-fe4.pantheonsite.io
click.granicus.com
istatus.edgenuity.net
*.granicus.com
secure02.stage.lithium.com
int.granicus.com
secure01.lithium.com
san-1-s12.tlsprovisioning.exacttarget.com
*.ca.granicus.com
secure01.lithium.com
view.ceros.com
ceros.map.fastly.net
view.ceros.com
5718998062727168-fe2.pantheonsite.io
eu1-status.mulesoft.com
secure02.stage.lithium.com
secure01.lithium.com
2fsupport.govdelivery.com
5645056174194688-fe3.pantheonsite.io
vpn2-eu-west-2.granicus.com
secure01.lithium.com
eu1-status.mulesoft.com
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
image.20210419.test1.s12.et.yellsatcloud.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
secure02.stage.lithium.com
ceros.map.fastly.net
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
eu1-status.mulesoft.com
istatus.edgenuity.net
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
secure02.stage.lithium.com
5714142736416768-fe4.pantheonsite.io
secure01.lithium.com
5690091590647808-fe2.pantheonsite.io
eu1-status.mulesoft.com
5690091590647808-fe2.pantheonsite.io
secure02.stage.lithium.com
ceros.map.fastly.net
eu1-status.mulesoft.com
view.ceros.com
secure01.lithium.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
5714142736416768-fe4.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
Certificate
The complete raw certificate details for *.ca.granicus.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIHS085uwLl/zANBgkqhkiG9w0BAQUFADCB3DELMAkGA1UE BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAj BgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOTA3BgNVBAsTMGh0 dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeTEx MC8GA1UEAxMoU3RhcmZpZWxkIFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0 eTERMA8GA1UEBRMIMTA2ODg0MzUwHhcNMTQxMDA2MTcyOTQ5WhcNMTUxMDI5MjA0 NjIwWjA/MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxGjAYBgNV BAMMESouY2EuZ3JhbmljdXMuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAxT8NCdrBugurSq3QFqurP90Si9Io/EpaOAZuhHCEgb1CdD3nyxp68+9e 2HT1WoeiYv85f5cPUpoJ22Z0om2WNqpZvBcHXHU1bXXmoGAAZd4nVuZ+XdqoawOO 3x2sXbMk8gQ4tOys9hEEQoaOpV9nFFS4jsstyAs1ho4Kw2gKCVqOoTI5B9d3y6OX tfw86whU6f/oWUxs9B9n4dRFWDb+8J+fSGljn2ylNtarRxZMTDOxwldkfh3K7Lhr otnCOMiDFL3/MM6XwJCAAaMxZHUeiB9J/dL+Rp5Vut3huNqUca+9928n15UUZ01+ 2wBk8eEv0r6YEk4frIKGd5f8KBVlh1b+fAORbE5ZjRVd1goMzlqoU3Wb3YVuvzmC dHe+SKiWZg+Ntdl4SiWc+1wjto6HsJ4rcjG21zPrXeTslGe/KWhONP3TmfLpDHmI SQ3kD6tr2HlBMgvWsaNPyRqg5MnYGBDaAMdWyoD+GUUWAGjwBK2IRZMFMiv2CB4E VL6cvVrCd21E78BxFRy98qcmHhakV9I2TkB7GPmbGUM4EnHjtgyNVT8/dPh/XHvZ jjg6EFe5/j4SwslNaFcHfJxIpgA52BPchgbFJkpHsM/sfsEbQGMRRMvTb6L9aJ5h 0B/13elF2PvMtSi5UZoH3bpYMzhvHrmC7BcqD70v+t10fAwOk8ECAwEAAaOCAdYw ggHSMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MA4GA1UdDwEB/wQEAwIFoDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnN0 YXJmaWVsZHRlY2guY29tL3NmczEtMjcuY3JsMFkGA1UdIARSMFAwTgYLYIZIAYb9 bgEHFwEwPzA9BggrBgEFBQcCARYxaHR0cDovL2NlcnRpZmljYXRlcy5zdGFyZmll bGR0ZWNoLmNvbS9yZXBvc2l0b3J5LzCBjQYIKwYBBQUHAQEEgYAwfjAqBggrBgEF BQcwAYYeaHR0cDovL29jc3Auc3RhcmZpZWxkdGVjaC5jb20vMFAGCCsGAQUFBzAC hkRodHRwOi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRv cnkvc2ZfaW50ZXJtZWRpYXRlLmNydDAfBgNVHSMEGDAWgBRJS1In0Ru88qEhamJ7 UUJ6itfVVjAtBgNVHREEJjAkghEqLmNhLmdyYW5pY3VzLmNvbYIPY2EuZ3Jhbmlj dXMuY29tMB0GA1UdDgQWBBShq6KGX1Z483xPcJhhFmCugvNnYzANBgkqhkiG9w0B AQUFAAOCAQEAYd3OvuRBmJXZlDuRO1NbOVqd4MKz67VR7z3C4g6pcnwulxBGIDwq h2ZbbQKYC9FIVnYWnhQrzWx/nxhGyO8oFdm9SFHALQf2vaQUt9ZHPAXzlt0ybTRw V+zHjLqXB1e5+uxThbJQ2Uh3r1Fku5+Brok4AHzxoN6bAis1R+QGZRYPuEIa1Ecf MRm4jvuwY2C8SErzmuMOXnxQmPPXAazDz8Trc7dyzXZ3kQVt0+H5e5mS2tmrfZVI VI9nwodd9AvMzdFOEYvwxP0miVzSow9yaFAymatnLsM2uWPvHo2qHWlTUEIW9ls9 +AM4tE2QaoaYyaZPEQCpqgRVTzNJSv+iSw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxT8NCdrBugurSq3QFqur P90Si9Io/EpaOAZuhHCEgb1CdD3nyxp68+9e2HT1WoeiYv85f5cPUpoJ22Z0om2W NqpZvBcHXHU1bXXmoGAAZd4nVuZ+XdqoawOO3x2sXbMk8gQ4tOys9hEEQoaOpV9n FFS4jsstyAs1ho4Kw2gKCVqOoTI5B9d3y6OXtfw86whU6f/oWUxs9B9n4dRFWDb+ 8J+fSGljn2ylNtarRxZMTDOxwldkfh3K7LhrotnCOMiDFL3/MM6XwJCAAaMxZHUe iB9J/dL+Rp5Vut3huNqUca+9928n15UUZ01+2wBk8eEv0r6YEk4frIKGd5f8KBVl h1b+fAORbE5ZjRVd1goMzlqoU3Wb3YVuvzmCdHe+SKiWZg+Ntdl4SiWc+1wjto6H sJ4rcjG21zPrXeTslGe/KWhONP3TmfLpDHmISQ3kD6tr2HlBMgvWsaNPyRqg5MnY GBDaAMdWyoD+GUUWAGjwBK2IRZMFMiv2CB4EVL6cvVrCd21E78BxFRy98qcmHhak V9I2TkB7GPmbGUM4EnHjtgyNVT8/dPh/XHvZjjg6EFe5/j4SwslNaFcHfJxIpgA5 2BPchgbFJkpHsM/sfsEbQGMRRMvTb6L9aJ5h0B/13elF2PvMtSi5UZoH3bpYMzhv HrmC7BcqD70v+t10fAwOk8ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21197732622558719 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.starfieldtech.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10688435' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-06 17:29:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 20:46:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ca.granicus.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804694667959178282541587089376717713722025245652090675787157602250418483717990256580905818785953005792523584727734152013517923660208703245392590009720757557388821290666731913559653233886160179612955199480801981480695802804089934005284189731006462506567251785848870458706862286545417017573590691788113135089216852057090839321620094183566678889610858545951849142862852335263520583159665041509619872781193840883044695530699634480859567385985464702026991790725553473398371624959988746318511203695080512356535270665166031786056425616720997154629846007515929544174270213346130180573677878780691701704060652018982130853576723790807059336427719155436431553353551721065316645301110817363658920461637569849845853497893117741501029245909886807741913497472202144232504792882684032397753653711584107038603094336418551589855510552688251038620976852831717352229456064520274290250578334861435505741573136596097893587204867728358534987276531655774567903427541444833120936323876545496903138629248763648511202019244629593715615884621901711581523876935045000689060997038243624100289455297621472779430794952578629173965963970997194325071497151310919377800063969882591302931163923579851811159906882142236326451632108037774322265084007000089503396753478593 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfs1-27.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sf_intermediate.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 494b5227d11bbcf2a1216a627b51427a8ad7d556 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca.granicus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.granicus.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1aba2865f5678f37c4f7098611660ae82f36763 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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