service-dev.sp.advertising.com
- Oath Inc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 05:32:d8:fa:e3:4d:81:68:92:32:8c:4b:3d:25:83:26 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Oath Inc
Organization:
Oath Inc
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:32:d8:fa:e3:4d:81:68:92:32:8c:4b:3d:25:83:26Serial Number (int): 6910155699713133704669498740281017126
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e8:a4:9c:de:83:c6:b9:c2:14:d7:81:d5:b4:ef:3a:8c:1e:06:06:47
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 12:27:17:d7:f2:51:3b:e9:29:df:b9:1f:23:b1:91:9c:1e:d0:48:fe
Fingerprint (sha256): 0b:0c:19:21:77:ce:56:88:f1:ac:8a:2c:12:07:bf:47:24:f5:89:ea:4d:38:07:df:0b:90:26:e6:87:a3:34:d6
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate service-dev.sp.advertising.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for service-dev.sp.advertising.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
service-dev.sp.advertising.com
Other certificates including the domain name advertising.com
(limited to 100 certificates)
*.pxl.ace.advertising.com
cmp.advertising.com
*.ads.yahoo.com
*.ads.yahoo.com
madseu.advertising.com
*.cmp.advertising.com
consent.oath.com
*.ads.yahoo.com
*.pubgw.ads.yahoo.com
cdn.cmp.advertising.com
cmp.advertising.com
secure.leadback.advertising.com
stage.guce.oath.com
secure.ace-tag.advertising.com
service.sp.advertising.com
stage.consent.oath.com
*.pubgw.ads.yahoo.com
stage.guce2.oath.com
secure.leadback.advertising.com
*.ads.yahoo.com
jp.adlearnop.advertising.com
stage.guce.oath.com
stage.guce.oath.com
dtm.advertising.com
stage.consent.oath.com
ui.aps.ads.yahoo.com
video.adaptv.advertising.com
stage.consent.oath.com
ui.aps.ads.yahoo.com
*.ads.yahoo.com
*.ads.yahoo.com
service-dev.sp.advertising.com
*.ads.yahoo.com
service-dev.idsync.analytics.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
*.cp.yahoo.com
stage.consent.oath.com
api.reports.advertising.com
*.ads.yahoo.com
*.ads.yahoo.com
*.adap.tv
stage.guce.oath.com
cmp.advertising.com
*.ads.yahoo.com
dtm.advertising.com
ui.aps.ads.yahoo.com
web.ssp.advertising.com
stage.guce.oath.com
ui.aps.ads.yahoo.com
adgui.prod.advertising.aol.com
*.pubgw.ads.yahoo.com
mads.advertising.com
reports.advertising.com
demo.adlearnop.advertising.com
*.pubgw.ads.yahoo.com
ssp.yahoo.com
video.adaptv.advertising.com
service.idsync.analytics.yahoo.com
*.ads.yahoo.com
secure.ace.advertising.com
trunk.consent.oath.com
*.ads.yahoo.com
service-dev.idsync.analytics.yahoo.com
video.adaptv.advertising.com
ui.aps.ads.yahoo.com
reports.jp.advertising.com
cdn.adap.tv
ui.aps.ads.yahoo.com
guce.oath.com
consent.oath.com
consent.oath.com
*.pubgw.ads.yahoo.com
consent.oath.com
prod-m-node-1111.ssp.ads.yahoo.com
stage.guce.oath.com
secure-leadback.tui.db.advertising.com
content.cmp.advertising.com
secure.uac.advertising.com
services.cmp.advertising.com
cmp.advertising.com
*.ads.yahoo.com
*.af.beap.bc.yahoo.com
smrtpxl.advertising.com
stage.consent.oath.com
guce2.oath.com
secure.qa-ads-auto.advertising.com
secure.ace.advertising.com
trunk.consent.oath.com
*.ads.yahoo.com
tag-dev.sp.advertising.com
video-stage.adaptv.advertising.com
*.ads.yahoo.com
trunk.guce.oath.com
uk.onedisplay.aol.com
cmp.advertising.com
guce.oath.com
video.adaptv.advertising.com
trunk.consent.oath.com
stage.consent.oath.com
cmp.advertising.com
*.ads.yahoo.com
*.ads.yahoo.com
madseu.advertising.com
*.cmp.advertising.com
consent.oath.com
*.ads.yahoo.com
*.pubgw.ads.yahoo.com
cdn.cmp.advertising.com
cmp.advertising.com
secure.leadback.advertising.com
stage.guce.oath.com
secure.ace-tag.advertising.com
service.sp.advertising.com
stage.consent.oath.com
*.pubgw.ads.yahoo.com
stage.guce2.oath.com
secure.leadback.advertising.com
*.ads.yahoo.com
jp.adlearnop.advertising.com
stage.guce.oath.com
stage.guce.oath.com
dtm.advertising.com
stage.consent.oath.com
ui.aps.ads.yahoo.com
video.adaptv.advertising.com
stage.consent.oath.com
ui.aps.ads.yahoo.com
*.ads.yahoo.com
*.ads.yahoo.com
service-dev.sp.advertising.com
*.ads.yahoo.com
service-dev.idsync.analytics.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
*.cp.yahoo.com
stage.consent.oath.com
api.reports.advertising.com
*.ads.yahoo.com
*.ads.yahoo.com
*.adap.tv
stage.guce.oath.com
cmp.advertising.com
*.ads.yahoo.com
dtm.advertising.com
ui.aps.ads.yahoo.com
web.ssp.advertising.com
stage.guce.oath.com
ui.aps.ads.yahoo.com
adgui.prod.advertising.aol.com
*.pubgw.ads.yahoo.com
mads.advertising.com
reports.advertising.com
demo.adlearnop.advertising.com
*.pubgw.ads.yahoo.com
ssp.yahoo.com
video.adaptv.advertising.com
service.idsync.analytics.yahoo.com
*.ads.yahoo.com
secure.ace.advertising.com
trunk.consent.oath.com
*.ads.yahoo.com
service-dev.idsync.analytics.yahoo.com
video.adaptv.advertising.com
ui.aps.ads.yahoo.com
reports.jp.advertising.com
cdn.adap.tv
ui.aps.ads.yahoo.com
guce.oath.com
consent.oath.com
consent.oath.com
*.pubgw.ads.yahoo.com
consent.oath.com
prod-m-node-1111.ssp.ads.yahoo.com
stage.guce.oath.com
secure-leadback.tui.db.advertising.com
content.cmp.advertising.com
secure.uac.advertising.com
services.cmp.advertising.com
cmp.advertising.com
*.ads.yahoo.com
*.af.beap.bc.yahoo.com
smrtpxl.advertising.com
stage.consent.oath.com
guce2.oath.com
secure.qa-ads-auto.advertising.com
secure.ace.advertising.com
trunk.consent.oath.com
*.ads.yahoo.com
tag-dev.sp.advertising.com
video-stage.adaptv.advertising.com
*.ads.yahoo.com
trunk.guce.oath.com
uk.onedisplay.aol.com
cmp.advertising.com
guce.oath.com
video.adaptv.advertising.com
trunk.consent.oath.com
stage.consent.oath.com
Certificate
The complete raw certificate details for service-dev.sp.advertising.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIQBTLY+uNNgWiSMoxLPSWDJjANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMDA0MDcwMDAwMDBaFw0yMDA1MDcxMjAwMDBa MHIxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT dW5ueXZhbGUxETAPBgNVBAoTCE9hdGggSW5jMScwJQYDVQQDEx5zZXJ2aWNlLWRl di5zcC5hZHZlcnRpc2luZy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQChYSJM3/825I1fx9hRlh7cCg2tn+XevFOvQ3oKKKeDlZ/z2B8dtXcQce5W IVmvZ8Gl0t+nHFnvq+EQqWbqpIkQ6MGlm/aabzH6ZchiEXSRvDQL9iKG7qN4hCqU 2p4DBCpWsOOj+iDUNYN6jGvKuQ1Xo4noud0qzkuVaIhC2NPe6rFoCINp8roRpF+X nkTXE5fvb8VpjsppUctRJXJYTliRPcuJCvkCE0vpaQxB1RpU9wwTOdQRpo+GXc3T zrhg3EtgS/zHnABUx51zAlxBUGQ1Z14sp54bsFOwYsyhmDdvACu+Ovb2DDYraiKz zRyj7J16Q31h6AVRTASrKBahHLVbAgMBAAGjggIMMIICCDAfBgNVHSMEGDAWgBRR aP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQU6KSc3oPGucIU14HVtO86jB4G BkcwKQYDVR0RBCIwIIIec2VydmljZS1kZXYuc3AuYWR2ZXJ0aXNpbmcuY29tMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYD VR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEt c2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3No YTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgG CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC AjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv bS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB /wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBACra WgU9SXOo3eA9593eIQqW2C0CtvPKpabYk1PlH+EMkaUunKabsnsY2de2rVZWpqXO kRa4wI96GEX63CpSWFFdtbkpr7Zom8WzKNiLGXk6Ej6cyyrYO8j7nZlf/Px3Zt1L yk1ATAW+AuNXhN5hLIyq7M8XjrRLcqFT/90nEkaV3zUQKEXU6OZj8pDQlFfaBzRS vw6zWZh6YTexyzQkJulsEoUXC1kL1I533i5TEJeMwBvF2/I8TUYitwAaI2Nb/PQH zWhluH0JatzM+GwIidjVHue0KrtACbNAeRmRRXm4LTZc5aAAF7ZYu51Kjhp97jyS 8kE4BgiUW8CIVAq0KDM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWEiTN//NuSNX8fYUZYe 3AoNrZ/l3rxTr0N6Ciing5Wf89gfHbV3EHHuViFZr2fBpdLfpxxZ76vhEKlm6qSJ EOjBpZv2mm8x+mXIYhF0kbw0C/Yihu6jeIQqlNqeAwQqVrDjo/og1DWDeoxryrkN V6OJ6LndKs5LlWiIQtjT3uqxaAiDafK6EaRfl55E1xOX72/FaY7KaVHLUSVyWE5Y kT3LiQr5AhNL6WkMQdUaVPcMEznUEaaPhl3N0864YNxLYEv8x5wAVMedcwJcQVBk NWdeLKeeG7BTsGLMoZg3bwArvjr29gw2K2ois80co+ydekN9YegFUUwEqygWoRy1 WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6910155699713133704669498740281017126 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'service-dev.sp.advertising.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20372265652998503843086786334942300162460536478613417188967914128697112970871339832397235936793127369520116972451207836533319758250182609657293054859801744711353215367375420707095230159153702798172157842706024901823364651902318722735758820518319257180280712093441154364134266682239478491446058497550074674481457109520189946051626402827900023156555599211980590846117877917442030841235774267546599851793951555842701638755957340604261649410488118224084853818348017342391317100906152184983400711356209924090937499933336538986018830943716916637813761650591767209310669724799107891836498386081597060166743888969790153078107 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e8a49cde83c6b9c214d781d5b4ef3a8c1e060647 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-dev.sp.advertising.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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