www.digitalocean.com
- DigitalOcean, LLC -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 03:89:78:c7:d6:c0:6c:01:c6:cc:5f:22:8f:65:a5:d2 was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DigitalOcean, LLC
Company registration number:
5118787
Organization: DigitalOcean, LLC
Organization: DigitalOcean, LLC
Address:
10th Floor
Address: 101 Avenue of the Americas
Postal code: 10013
State / Province: New York
Locality: New York
Country: US
Address: 101 Avenue of the Americas
Postal code: 10013
State / Province: New York
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:89:78:c7:d6:c0:6c:01:c6:cc:5f:22:8f:65:a5:d2Serial Number (int): 4701478378993213450359830584182023634
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 79:ad:37:f1:63:15:d9:46:f4:c1:e4:5e:6d:f5:e1:a9:cd:9d:59:58
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 61:27:13:d7:bf:e6:05:51:8c:ee:69:e7:2d:91:f7:55:55:b9:10:6d
Fingerprint (sha256): 0a:83:ac:bc:52:1b:4b:af:45:83:11:d3:93:59:bd:20:d3:9c:3f:93:ed:20:07:6d:5a:11:e1:bf:61:0f:b2:aa
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g1.crl
Check the revocation status for certificate www.digitalocean.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.digitalocean.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.digitalocean.com
api.digitalocean.com
cloud.digitalocean.com
developers.digitalocean.com
api.digitalocean.com
cloud.digitalocean.com
developers.digitalocean.com
Other certificates including the domain name digitalocean.com
(limited to 100 certificates)
www.demo-tourismconnects.ca
india.polo-development.com
p.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ideas.digitalocean.com
tsunami.digitalocean.com
digitalocean.com
investors.digitalocean.com
p.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
betastatus.digitalocean.com
pages.support.digitalocean.com
www.demo-tourismconnects.ca
p.ssl.fastly.net
p.ssl.fastly.net
dns-vetting1k.map.fastly.net
www.visitor-friendlyalberta.ca
dctrack01.nyc3.internal.digitalocean.com
go.rescuevocations.org
m.ssl.fastly.net
groove.digitalocean.com
trinityu.trinityconsultants.com
email.comms.digitalocean.com
investor.digitalocean.com
p.ssl.fastly.net
m.ssl.fastly.net
m.ssl.fastly.net
www.visitor-friendlyalberta.ca
anchor.digitalocean.com
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
groove.digitalocean.com
rewards.digitalocean.com
www.visitor-friendlyalberta.ca
m.ssl.fastly.net
au.lakeshore.com
dns-vetting1k.map.fastly.net
www.frailtycertification.com
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
p.ssl.fastly.net
m.ssl.fastly.net
m.ssl.fastly.net
www.trainwithpassion.ca
www.visitorfriendlyalberta.ca
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
brand.digitalocean.com
ssl3926.cloudflare.com
www.visitor-friendlyalberta.ca
investors.digitalocean.com
p.ssl.fastly.net
emss.goldfin.ca
www.ekgguy.com
www.learn-rto8.com
www.demo-tourismconnects.ca
dns-vetting2.map.fastly.net
p.ssl.fastly.net
www.visitor-friendlyalberta.ca
www.digitalocean.com
m.ssl.fastly.net
www.visitorfriendlyalberta.ca
ssl503536.cloudflaressl.com
dns-vetting1-mims-pawel.map.fastly.net
m.ssl.fastly.net
www.digitalocean.com
www.visitor-friendlyalberta.ca
b-0.hexagon-cdn.com
events.digitalocean.com
awesome-actions.com
digitalocean.com
www.visitor-friendlyalberta.ca
www.visitorfriendlyalberta.ca
rewards.digitalocean.com
dns-vetting2.map.fastly.net
www.visitorfriendlyalberta.ca
www.digitalocean.com
*.internal.digitalocean.com
m.ssl.fastly.net
dns-vetting2.map.fastly.net
ideas.digitalocean.com
prod-codd-admin.sfo3.internal.digitalocean.com
marketplace-frontend-nyc1.digitalocean.com
www.visitorfriendlyalberta.ca
dns-vetting1k.map.fastly.net
anchor.digitalocean.com
www.trainwithpassion.ca
m.ssl.fastly.net
www.eatandlearnnm.com
www.learn-rto8.com
betastatus.digitalocean.com
ssl503536.cloudflaressl.com
m.ssl.fastly.net
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
www.visitor-friendlyalberta.ca
dns-vetting1k.map.fastly.net
www.pathwaylearningnetwork.com
dns-vetting1k.map.fastly.net
p.ssl.fastly.net
india.polo-development.com
p.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ideas.digitalocean.com
tsunami.digitalocean.com
digitalocean.com
investors.digitalocean.com
p.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
betastatus.digitalocean.com
pages.support.digitalocean.com
www.demo-tourismconnects.ca
p.ssl.fastly.net
p.ssl.fastly.net
dns-vetting1k.map.fastly.net
www.visitor-friendlyalberta.ca
dctrack01.nyc3.internal.digitalocean.com
go.rescuevocations.org
m.ssl.fastly.net
groove.digitalocean.com
trinityu.trinityconsultants.com
email.comms.digitalocean.com
investor.digitalocean.com
p.ssl.fastly.net
m.ssl.fastly.net
m.ssl.fastly.net
www.visitor-friendlyalberta.ca
anchor.digitalocean.com
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
groove.digitalocean.com
rewards.digitalocean.com
www.visitor-friendlyalberta.ca
m.ssl.fastly.net
au.lakeshore.com
dns-vetting1k.map.fastly.net
www.frailtycertification.com
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
p.ssl.fastly.net
m.ssl.fastly.net
m.ssl.fastly.net
www.trainwithpassion.ca
www.visitorfriendlyalberta.ca
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
brand.digitalocean.com
ssl3926.cloudflare.com
www.visitor-friendlyalberta.ca
investors.digitalocean.com
p.ssl.fastly.net
emss.goldfin.ca
www.ekgguy.com
www.learn-rto8.com
www.demo-tourismconnects.ca
dns-vetting2.map.fastly.net
p.ssl.fastly.net
www.visitor-friendlyalberta.ca
www.digitalocean.com
m.ssl.fastly.net
www.visitorfriendlyalberta.ca
ssl503536.cloudflaressl.com
dns-vetting1-mims-pawel.map.fastly.net
m.ssl.fastly.net
www.digitalocean.com
www.visitor-friendlyalberta.ca
b-0.hexagon-cdn.com
events.digitalocean.com
awesome-actions.com
digitalocean.com
www.visitor-friendlyalberta.ca
www.visitorfriendlyalberta.ca
rewards.digitalocean.com
dns-vetting2.map.fastly.net
www.visitorfriendlyalberta.ca
www.digitalocean.com
*.internal.digitalocean.com
m.ssl.fastly.net
dns-vetting2.map.fastly.net
ideas.digitalocean.com
prod-codd-admin.sfo3.internal.digitalocean.com
marketplace-frontend-nyc1.digitalocean.com
www.visitorfriendlyalberta.ca
dns-vetting1k.map.fastly.net
anchor.digitalocean.com
www.trainwithpassion.ca
m.ssl.fastly.net
www.eatandlearnnm.com
www.learn-rto8.com
betastatus.digitalocean.com
ssl503536.cloudflaressl.com
m.ssl.fastly.net
m.ssl.fastly.net
dns-vetting1k.map.fastly.net
www.visitor-friendlyalberta.ca
dns-vetting1k.map.fastly.net
www.pathwaylearningnetwork.com
dns-vetting1k.map.fastly.net
p.ssl.fastly.net
Certificate
The complete raw certificate details for www.digitalocean.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIQA4l4x9bAbAHGzF8ij2Wl0jANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE2MDkyNzAwMDAwMFoXDTE4MTAwMjEy MDAwMFowggEZMR0wGwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysG AQQBgjc8AgEDEwJVUzEZMBcGCysGAQQBgjc8AgECEwhEZWxhd2FyZTEQMA4GA1UE BRMHNTExODc4NzETMBEGA1UECRMKMTB0aCBGbG9vcjEjMCEGA1UECRMaMTAxIEF2 ZW51ZSBvZiB0aGUgQW1lcmljYXMxDjAMBgNVBBETBTEwMDEzMQswCQYDVQQGEwJV UzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5ldyBZb3JrMRowGAYDVQQK ExFEaWdpdGFsT2NlYW4sIExMQzEdMBsGA1UEAxMUd3d3LmRpZ2l0YWxvY2Vhbi5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDkiQbkkHrpQqNg80 EUhIqawA4psk8OViGxsTOiOCxWje7TqvJnTeaiXBuDzUpoSSjtazmXrNb2ap4O1m O0HSVYYtbqCJzrteOfthX+TIZNb33y9ZsXnZiXDgBdRU9gtCBcMrrc5gcovKNDtM NfgZLlu6RA9+lKdPB5um1Bwpcs53MTyxcQiygq990+MyuEGq1myNn8VJhPJtFu56 1FN4j3Cub6aD8TSwr41H5rTuO7+XnFBH/vS22fjx4gVUl//ww/qcBgNhU/RWmXVV YCNYUrcJyosjO8dFjvJOdrSvNUFuu4JGoS+SiaYbEkYQkEJzl8nKF1kd/YJceRVf SfYxAgMBAAGjggJRMIICTTAfBgNVHSMEGDAWgBQ901Cl1qCt7vNKYApl0yHU+PjW DzAdBgNVHQ4EFgQUea038WMV2Ub0weRebfXhqc2dWVgwagYDVR0RBGMwYYIUd3d3 LmRpZ2l0YWxvY2Vhbi5jb22CFGFwaS5kaWdpdGFsb2NlYW4uY29tghZjbG91ZC5k aWdpdGFsb2NlYW4uY29tghtkZXZlbG9wZXJzLmRpZ2l0YWxvY2Vhbi5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNV HR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1ldi1z ZXJ2ZXItZzEuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hh Mi1ldi1zZXJ2ZXItZzEuY3JsMEsGA1UdIAREMEIwNwYJYIZIAYb9bAIBMCowKAYI KwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEw gYgGCCsGAQUFBwEBBHwwejAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl cnQuY29tMFIGCCsGAQUFBzAChkZodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v RGlnaUNlcnRTSEEyRXh0ZW5kZWRWYWxpZGF0aW9uU2VydmVyQ0EuY3J0MAwGA1Ud EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AIiA4NO75z4xwATuNW8xtIKsUaS5J8cGwRcjXISMNL2IJeji5EcJGdngfRL0Tcst FUtjZO8FM61f3A7axHj2uQdoDK1M1N2LymjcvlNJIZ9n67Vi+uV5BYFTxjUYbyI+ 85uksQs6JUIH5KE7Nom/rl+3WBKECHmYekPXGUgqv2rZImlv4+33po9xh457dsfj ST7ASlR3Xsklv0DknRO+WdZaoKIb+WgnBkKgP6xz3Z7xh1U4MWZy54QA+FYGwYiZ xRGRAOFP7hUzsc8el5qh+dGirSI/9L2WrUhNphft9lrHTq8oM9TkeYPeiBlpSTDR 5y9XmtNauHnPI8mLDE47KFU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w5IkG5JB66UKjYPNBFI SKmsAOKbJPDlYhsbEzojgsVo3u06ryZ03molwbg81KaEko7Ws5l6zW9mqeDtZjtB 0lWGLW6gic67Xjn7YV/kyGTW998vWbF52Ylw4AXUVPYLQgXDK63OYHKLyjQ7TDX4 GS5bukQPfpSnTwebptQcKXLOdzE8sXEIsoKvfdPjMrhBqtZsjZ/FSYTybRbuetRT eI9wrm+mg/E0sK+NR+a07ju/l5xQR/70ttn48eIFVJf/8MP6nAYDYVP0Vpl1VWAj WFK3CcqLIzvHRY7yTna0rzVBbruCRqEvkommGxJGEJBCc5fJyhdZHf2CXHkVX0n2 MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4701478378993213450359830584182023634 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5118787' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10th Floor' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '101 Avenue of the Americas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10013' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigitalOcean, LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digitalocean.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28158185441031517762804353511799833730737859781847222098512663491763930598872402397347556857798300298950003472807240895051563128857742319139814984922856072082067489931031524315393501857904637159178402545164180337159760700551046005790012077358038065815553768659661952942890386914364620822031034296120816294872977054609434403688065318766425755588759976513490603087611199378862587752064751612917860418270915434424272147602968206137928271884863211856824007096112802916485110658816173755260835599509940293599349928986667507041005729853089390178401114067383787232933512097628328221009824193712263967302963720628307076183601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 79ad37f16315d946f4c1e45e6df5e1a9cd9d5958 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalocean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.digitalocean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.digitalocean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.digitalocean.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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